Compilation results for contint2003.wikimedia.org: System changes detected

You can retrieve this result from host.json.

Catalog differences

Summary

Total Resources:	3114
Resources added:	77
Resources removed:	0
Resources modified:	79
Change percentage:	5.01%

Resources only in the new catalog

Systemd::Service[wmf_auto_restart_docker]
File[/etc/docker/daemon.json]
Systemd::Unit[wmf_auto_restart_containerd.timer]
File[/etc/logrotate.d/docker-system-prune-dangling]
File[/etc/rsyslog.d/40-wmf-auto-restart-containerd.conf]
Systemd::Timer::Job[wmf_auto_restart_docker]
Class[Profile::Ci::Docker]
Systemd::Unit[docker-system-prune-dangling.timer]
Systemd::Timer[wmf_auto_restart_docker]
File[/lib/systemd/system/docker-system-prune-dangling.timer]
Systemd::Unit[docker-system-prune-dangling.service]
File[/var/log/wmf_auto_restart_containerd]
File_line[auto_restart_file_presence_containerd]
File[/var/log/docker-system-prune-all]
Systemd::Timer::Job[wmf_auto_restart_containerd]
Package[docker.io]
Systemd::Unit[wmf_auto_restart_docker.service]
File[/lib/systemd/system/wmf_auto_restart_containerd.service]
Systemd::Syslog[wmf_auto_restart_docker]
Systemd::Service[docker-system-prune-dangling]
Profile::Auto_restarts::Service[docker]
Exec[systemd daemon-reload for wmf_auto_restart_docker.service (wmf_auto_restart_docker.service)]
Logrotate::Conf[wmf_auto_restart_docker]
Systemd::Unit[docker-system-prune-all.timer]
Exec[systemd daemon-reload for docker-system-prune-dangling.service (docker-system-prune-dangling.service)]
Systemd::Unit[wmf_auto_restart_containerd.service]
Systemd::Service[docker-system-prune-all]
File[/lib/systemd/system/docker-system-prune-all.timer]
File[/lib/systemd/system/wmf_auto_restart_containerd.timer]
Ferm::Conf[docker-ferm]
Systemd::Unit[wmf_auto_restart_docker.timer]
Profile::Auto_restarts::Service[containerd]
File[/lib/systemd/system/docker-system-prune-all.service]
File[/etc/rsyslog.d/40-docker-system-prune-all.conf]
Exec[systemd daemon-reload for docker-system-prune-all.timer (docker-system-prune-all.timer)]
Systemd::Timer[docker-system-prune-dangling]
Systemd::Syslog[wmf_auto_restart_containerd]
File[/etc/rsyslog.d/40-wmf-auto-restart-docker.conf]
File[/etc/logrotate.d/wmf_auto_restart_docker]
File[/etc/logrotate.d/wmf_auto_restart_containerd]
Logrotate::Conf[docker-system-prune-all]
File[/etc/docker]
Systemd::Timer[docker-system-prune-all]
Exec[systemd daemon-reload for wmf_auto_restart_docker.timer (wmf_auto_restart_docker.timer)]
Systemd::Unit[docker-system-prune-all.service]
Service[docker-system-prune-all.timer]
Rsyslog::Conf[wmf_auto_restart_containerd]
Rsyslog::Conf[docker-system-prune-dangling]
File[/usr/local/bin/docker-credential-environment]
File[/var/log/docker-system-prune-dangling]
Service[wmf_auto_restart_containerd.timer]
Class[Docker::Configuration]
Logrotate::Conf[wmf_auto_restart_containerd]
Systemd::Timer::Job[docker-system-prune-dangling]
Exec[systemd daemon-reload for wmf_auto_restart_containerd.service (wmf_auto_restart_containerd.service)]
File[/lib/systemd/system/wmf_auto_restart_docker.timer]
Systemd::Timer[wmf_auto_restart_containerd]
Exec[systemd daemon-reload for docker-system-prune-all.service (docker-system-prune-all.service)]
Rsyslog::Conf[wmf_auto_restart_docker]
File[/etc/rsyslog.d/40-docker-system-prune-dangling.conf]
File[/var/log/wmf_auto_restart_docker]
Rsyslog::Conf[docker-system-prune-all]
Systemd::Service[wmf_auto_restart_containerd]
File[/lib/systemd/system/wmf_auto_restart_docker.service]
Systemd::Syslog[docker-system-prune-dangling]
Logrotate::Conf[docker-system-prune-dangling]
Exec[systemd daemon-reload for docker-system-prune-dangling.timer (docker-system-prune-dangling.timer)]
Systemd::Syslog[docker-system-prune-all]
Service[docker-system-prune-dangling.timer]
File[/etc/logrotate.d/docker-system-prune-all]
Class[Profile::Docker::Prune]
Systemd::Timer::Job[docker-system-prune-all]
Service[wmf_auto_restart_docker.timer]
Package[acl]
File_line[auto_restart_file_presence_docker]
File[/lib/systemd/system/docker-system-prune-dangling.service]
Exec[systemd daemon-reload for wmf_auto_restart_containerd.timer (wmf_auto_restart_containerd.timer)]

Resources modified

Systemd::Unit[docker-system-prune-dangling.timer]

Parameters differences:

--- Systemd::Unit[docker-system-prune-dangling.timer].orig
+++ Systemd::Unit[docker-system-prune-dangling.timer]

+    restart           => False
+    override          => False
+    unit              => docker-system-prune-dangling.timer
+    require           => ['Class[Systemd]']
+    ensure            => present
+    override_filename => puppet-override.conf

File[/etc/docker]

Parameters differences:

--- File[/etc/docker].orig
+++ File[/etc/docker]

+    owner  => root
+    mode   => 0700
+    ensure => directory
+    group  => root

Systemd::Unit[docker-system-prune-all.service]

Parameters differences:

--- Systemd::Unit[docker-system-prune-all.service].orig
+++ Systemd::Unit[docker-system-prune-all.service]

+    restart           => False
+    override          => False
+    unit              => docker-system-prune-all.service
+    require           => ['Class[Systemd]']
+    ensure            => present
+    override_filename => puppet-override.conf

File[/var/log/wmf_auto_restart_containerd]

Parameters differences:

--- File[/var/log/wmf_auto_restart_containerd].orig
+++ File[/var/log/wmf_auto_restart_containerd]

+    owner  => root
+    force  => True
+    mode   => 0755
+    backup => False
+    ensure => absent
+    group  => root

Logrotate::Conf[wmf_auto_restart_docker]

Parameters differences:

--- Logrotate::Conf[wmf_auto_restart_docker].orig
+++ Logrotate::Conf[wmf_auto_restart_docker]

+    ensure => absent

File[/etc/rsyslog.d/40-docker-system-prune-dangling.conf]

Parameters differences:

--- File[/etc/rsyslog.d/40-docker-system-prune-dangling.conf].orig
+++ File[/etc/rsyslog.d/40-docker-system-prune-dangling.conf]

+    owner  => root
+    mode   => 0444
+    ensure => present
+    notify => Service[rsyslog]
+    group  => root

Content differences:

--- /etc/rsyslog.d/40-docker-system-prune-dangling.conf.orig
+++ /etc/rsyslog.d/40-docker-system-prune-dangling.conf
@@ -0,0 +1,10 @@
+# rsyslog.conf(5) configuration file for services.
+# This file is managed by Puppet.
+if $programname startswith "docker-system-prune-dangling" then {
+    action(
+        type="omfile" file="/var/log/docker-system-prune-dangling/syslog.log"
+        fileOwner="root" fileGroup="root"
+        fileCreateMode="0644"
+    )
+    & stop
+}

File[/var/log/docker-system-prune-all]

Parameters differences:

--- File[/var/log/docker-system-prune-all].orig
+++ File[/var/log/docker-system-prune-all]

+    owner  => root
+    force  => True
+    mode   => 0755
+    backup => False
+    ensure => directory
+    group  => root

Systemd::Service[docker-system-prune-all]

Parameters differences:

--- Systemd::Service[docker-system-prune-all].orig
+++ Systemd::Service[docker-system-prune-all]

+    require                  => Systemd::Unit[docker-system-prune-all.service]
+    migration_task           => T407130
+    unit_type                => timer
+    monitoring_critical      => False
+    monitoring_enabled       => False
+    restart                  => False
+    override                 => False
+    service_params           => {}
+    monitoring_contact_group => admins
+    ensure                   => present

Logrotate::Conf[docker-system-prune-all]

Parameters differences:

--- Logrotate::Conf[docker-system-prune-all].orig
+++ Logrotate::Conf[docker-system-prune-all]

+    ensure => present

Systemd::Unit[wmf_auto_restart_docker.service]

Parameters differences:

--- Systemd::Unit[wmf_auto_restart_docker.service].orig
+++ Systemd::Unit[wmf_auto_restart_docker.service]

+    restart           => False
+    override          => False
+    unit              => wmf_auto_restart_docker.service
+    require           => ['Class[Systemd]']
+    ensure            => absent
+    override_filename => puppet-override.conf

File[/lib/systemd/system/wmf_auto_restart_docker.service]

Parameters differences:

--- File[/lib/systemd/system/wmf_auto_restart_docker.service].orig
+++ File[/lib/systemd/system/wmf_auto_restart_docker.service]

+    owner  => root
+    mode   => 0444
+    ensure => absent
+    notify => Exec[systemd daemon-reload for wmf_auto_restart_docker.service (wmf_auto_restart_docker.service)]
+    group  => root

Content differences:

--- /lib/systemd/system/wmf_auto_restart_docker.service.orig
+++ /lib/systemd/system/wmf_auto_restart_docker.service
@@ -0,0 +1,8 @@
+[Unit]
+Description=Auto restart job: docker
+Documentation=https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state
+
+[Service]
+Type=oneshot
+User=root
+ExecStart=/usr/local/sbin/wmf-auto-restart -s docker

Systemd::Service[wmf_auto_restart_docker]

Parameters differences:

--- Systemd::Service[wmf_auto_restart_docker].orig
+++ Systemd::Service[wmf_auto_restart_docker]

+    require                  => Systemd::Unit[wmf_auto_restart_docker.service]
+    migration_task           => T407130
+    unit_type                => timer
+    monitoring_critical      => False
+    monitoring_enabled       => False
+    restart                  => False
+    override                 => False
+    service_params           => {}
+    monitoring_contact_group => admins
+    ensure                   => absent

Exec[systemd daemon-reload for wmf_auto_restart_docker.timer (wmf_auto_restart_docker.timer)]

Parameters differences:

--- Exec[systemd daemon-reload for wmf_auto_restart_docker.timer (wmf_auto_restart_docker.timer)].orig
+++ Exec[systemd daemon-reload for wmf_auto_restart_docker.timer (wmf_auto_restart_docker.timer)]

+    command     => /bin/systemctl daemon-reload
+    refreshonly => True

Service[wmf_auto_restart_containerd.timer]

Parameters differences:

--- Service[wmf_auto_restart_containerd.timer].orig
+++ Service[wmf_auto_restart_containerd.timer]

+    before   => ['Exec[systemd daemon-reload for wmf_auto_restart_containerd.timer (wmf_auto_restart_containerd.timer)]']
+    ensure   => stopped
+    provider => systemd
+    enable   => False

File[/etc/logrotate.d/docker-system-prune-all]

Parameters differences:

--- File[/etc/logrotate.d/docker-system-prune-all].orig
+++ File[/etc/logrotate.d/docker-system-prune-all]

+    owner  => root
+    mode   => 0444
+    ensure => present
+    group  => root

Content differences:

--- /etc/logrotate.d/docker-system-prune-all.orig
+++ /etc/logrotate.d/docker-system-prune-all
@@ -0,0 +1,12 @@
+# logrotate(8) config for docker-system-prune-all
+
+/var/log/docker-system-prune-all/*.log {
+    daily
+    copytruncate
+    missingok
+    compress
+    delaycompress
+    notifempty
+    rotate 15
+    size 256M
+}

File[/etc/docker/daemon.json]

Parameters differences:

--- File[/etc/docker/daemon.json].orig
+++ File[/etc/docker/daemon.json]

+    owner  => root
+    mode   => 0440
+    ensure => present
+    group  => root

Content differences:

--- /etc/docker/daemon.json.orig
+++ /etc/docker/daemon.json
@@ -0,0 +1,4 @@
+{
+  "data-root": "/srv/docker",
+  "iptables": false
+}

File[/lib/systemd/system/wmf_auto_restart_containerd.service]

Parameters differences:

--- File[/lib/systemd/system/wmf_auto_restart_containerd.service].orig
+++ File[/lib/systemd/system/wmf_auto_restart_containerd.service]

+    owner  => root
+    mode   => 0444
+    ensure => absent
+    notify => Exec[systemd daemon-reload for wmf_auto_restart_containerd.service (wmf_auto_restart_containerd.service)]
+    group  => root

Content differences:

--- /lib/systemd/system/wmf_auto_restart_containerd.service.orig
+++ /lib/systemd/system/wmf_auto_restart_containerd.service
@@ -0,0 +1,8 @@
+[Unit]
+Description=Auto restart job: containerd
+Documentation=https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state
+
+[Service]
+Type=oneshot
+User=root
+ExecStart=/usr/local/sbin/wmf-auto-restart -s containerd

File[/var/log/docker-system-prune-dangling]

Parameters differences:

--- File[/var/log/docker-system-prune-dangling].orig
+++ File[/var/log/docker-system-prune-dangling]

+    owner  => root
+    force  => True
+    mode   => 0755
+    backup => False
+    ensure => directory
+    group  => root

File_line[auto_restart_file_presence_docker]

Parameters differences:

--- File_line[auto_restart_file_presence_docker].orig
+++ File_line[auto_restart_file_presence_docker]

+    path    => /etc/debdeploy-client/autorestarts.conf
+    require => File[/etc/debdeploy-client/autorestarts.conf]
+    ensure  => absent
+    line    => docker

Exec[systemd daemon-reload for docker-system-prune-all.timer (docker-system-prune-all.timer)]

Parameters differences:

--- Exec[systemd daemon-reload for docker-system-prune-all.timer (docker-system-prune-all.timer)].orig
+++ Exec[systemd daemon-reload for docker-system-prune-all.timer (docker-system-prune-all.timer)]

+    before      => ['Service[docker-system-prune-all.timer]']
+    command     => /bin/systemctl daemon-reload
+    refreshonly => True

Class[Docker::Configuration]

Parameters differences:

--- Class[Docker::Configuration].orig
+++ Class[Docker::Configuration]

+    location  => /etc/docker/daemon.json
+    settings  => {'data-root': '/srv/docker', 'iptables': False}
+    directory => /etc/docker

Systemd::Syslog[docker-system-prune-all]

Parameters differences:

--- Systemd::Syslog[docker-system-prune-all].orig
+++ Systemd::Syslog[docker-system-prune-all]

+    owner                  => root
+    readable_by            => all
+    force_stop             => True
+    programname_comparison => startswith
+    log_filename           => syslog.log
+    group                  => root
+    base_dir               => /var/log
+    ensure                 => present

Rsyslog::Conf[wmf_auto_restart_containerd]

Parameters differences:

--- Rsyslog::Conf[wmf_auto_restart_containerd].orig
+++ Rsyslog::Conf[wmf_auto_restart_containerd]

+    require  => File[/var/log/wmf_auto_restart_containerd]
+    priority => 40
+    ensure   => absent
+    mode     => 0444

Class[Profile::Ci::Docker]

Parameters differences:

--- Class[Profile::Ci::Docker].orig
+++ Class[Profile::Ci::Docker]

+    settings               => {'data-root': '/srv/docker', 'iptables': False}
+    jenkins_agent_username => jenkins-agent
+    docker_version         => 5:20.10.18~3-0~debian

Systemd::Timer::Job[wmf_auto_restart_containerd]

Parameters differences:

--- Systemd::Timer::Job[wmf_auto_restart_containerd].orig
+++ Systemd::Timer::Job[wmf_auto_restart_containerd]

+    syslog_force_stop         => True
+    private_tmp               => False
+    monitoring_contact_groups => admins
+    logfile_basedir           => /var/log
+    syslog_match_startswith   => True
+    require                   => File[/usr/local/sbin/wmf-auto-restart]
+    monitoring_notes_url      => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state
+    logfile_group             => root
+    logfile_name              => syslog.log
+    logging_enabled           => True
+    environment               => {}
+    ensure                    => absent
+    user                      => root
+    ignore_errors             => False
+    send_mail                 => False
+    fixed_random_delay        => False
+    description               => Auto restart job: containerd
+    success_exit_status       => []
+    send_mail_only_on_error   => True
+    command                   => /usr/local/sbin/wmf-auto-restart -s containerd
+    send_mail_to              => root@contint2003.wikimedia.org
+    logfile_perms             => all
+    interval                  => {'start': 'OnCalendar', 'interval': 'Mon,Tue,Wed,Thu,Fri *-*-* 15:15:00'}
+    monitoring_enabled        => False

Systemd::Timer[wmf_auto_restart_containerd]

Parameters differences:

--- Systemd::Timer[wmf_auto_restart_containerd].orig
+++ Systemd::Timer[wmf_auto_restart_containerd]

+    fixed_random_delay => False
+    accuracy           => 15sec
+    timer_intervals    => [{'start': 'OnCalendar', 'interval': 'Mon,Tue,Wed,Thu,Fri *-*-* 15:15:00'}]
+    splay              => 0
+    unit_name          => wmf_auto_restart_containerd.service
+    ensure             => absent

Systemd::Timer::Job[docker-system-prune-all]

Parameters differences:

--- Systemd::Timer::Job[docker-system-prune-all].orig
+++ Systemd::Timer::Job[docker-system-prune-all]

+    syslog_force_stop         => True
+    private_tmp               => False
+    monitoring_contact_groups => admins
+    logfile_basedir           => /var/log
+    syslog_match_startswith   => True
+    monitoring_notes_url      => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state
+    logfile_group             => root
+    logfile_name              => syslog.log
+    logging_enabled           => True
+    environment               => {}
+    splay                     => 3600
+    ensure                    => present
+    user                      => root
+    ignore_errors             => False
+    send_mail                 => False
+    fixed_random_delay        => False
+    description               => Prune all Docker images and volumes
+    success_exit_status       => []
+    send_mail_only_on_error   => True
+    command                   => /usr/bin/docker system prune --all --volumes --force
+    send_mail_to              => root@contint2003.wikimedia.org
+    logfile_perms             => all
+    interval                  => {'start': 'OnCalendar', 'interval': 'Sunday 3:00 UTC'}
+    monitoring_enabled        => False

File[/usr/local/bin/docker-credential-environment]

Parameters differences:

--- File[/usr/local/bin/docker-credential-environment].orig
+++ File[/usr/local/bin/docker-credential-environment]

+    source => puppet:///modules/docker/docker-credential-environment.py
+    owner  => root
+    mode   => 0755
+    group  => root

Systemd::Timer[wmf_auto_restart_docker]

Parameters differences:

--- Systemd::Timer[wmf_auto_restart_docker].orig
+++ Systemd::Timer[wmf_auto_restart_docker]

+    fixed_random_delay => False
+    accuracy           => 15sec
+    timer_intervals    => [{'start': 'OnCalendar', 'interval': 'Mon,Tue,Wed,Thu,Fri *-*-* 8:20:00'}]
+    splay              => 0
+    unit_name          => wmf_auto_restart_docker.service
+    ensure             => absent

Systemd::Timer::Job[wmf_auto_restart_docker]

Parameters differences:

--- Systemd::Timer::Job[wmf_auto_restart_docker].orig
+++ Systemd::Timer::Job[wmf_auto_restart_docker]

+    syslog_force_stop         => True
+    private_tmp               => False
+    monitoring_contact_groups => admins
+    logfile_basedir           => /var/log
+    syslog_match_startswith   => True
+    require                   => File[/usr/local/sbin/wmf-auto-restart]
+    monitoring_notes_url      => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state
+    logfile_group             => root
+    logfile_name              => syslog.log
+    logging_enabled           => True
+    environment               => {}
+    ensure                    => absent
+    user                      => root
+    ignore_errors             => False
+    send_mail                 => False
+    fixed_random_delay        => False
+    description               => Auto restart job: docker
+    success_exit_status       => []
+    send_mail_only_on_error   => True
+    command                   => /usr/local/sbin/wmf-auto-restart -s docker
+    send_mail_to              => root@contint2003.wikimedia.org
+    logfile_perms             => all
+    interval                  => {'start': 'OnCalendar', 'interval': 'Mon,Tue,Wed,Thu,Fri *-*-* 8:20:00'}
+    monitoring_enabled        => False

File[/lib/systemd/system/wmf_auto_restart_containerd.timer]

Parameters differences:

--- File[/lib/systemd/system/wmf_auto_restart_containerd.timer].orig
+++ File[/lib/systemd/system/wmf_auto_restart_containerd.timer]

+    owner  => root
+    mode   => 0444
+    ensure => absent
+    notify => Exec[systemd daemon-reload for wmf_auto_restart_containerd.timer (wmf_auto_restart_containerd.timer)]
+    group  => root

Content differences:

--- /lib/systemd/system/wmf_auto_restart_containerd.timer.orig
+++ /lib/systemd/system/wmf_auto_restart_containerd.timer
@@ -0,0 +1,12 @@
+[Unit]
+Description=Periodic execution of wmf_auto_restart_containerd.service
+
+[Timer]
+Unit=wmf_auto_restart_containerd.service
+# Accuracy sets the maximum time interval around the execution time we want to allow
+AccuracySec=15sec
+OnCalendar=Mon,Tue,Wed,Thu,Fri *-*-* 15:15:00
+RandomizedDelaySec=0
+
+[Install]
+WantedBy=multi-user.target

File[/etc/rsyslog.d/40-docker-system-prune-all.conf]

Parameters differences:

--- File[/etc/rsyslog.d/40-docker-system-prune-all.conf].orig
+++ File[/etc/rsyslog.d/40-docker-system-prune-all.conf]

+    owner  => root
+    mode   => 0444
+    ensure => present
+    notify => Service[rsyslog]
+    group  => root

Content differences:

--- /etc/rsyslog.d/40-docker-system-prune-all.conf.orig
+++ /etc/rsyslog.d/40-docker-system-prune-all.conf
@@ -0,0 +1,10 @@
+# rsyslog.conf(5) configuration file for services.
+# This file is managed by Puppet.
+if $programname startswith "docker-system-prune-all" then {
+    action(
+        type="omfile" file="/var/log/docker-system-prune-all/syslog.log"
+        fileOwner="root" fileGroup="root"
+        fileCreateMode="0644"
+    )
+    & stop
+}

File[/etc/logrotate.d/wmf_auto_restart_containerd]

Parameters differences:

--- File[/etc/logrotate.d/wmf_auto_restart_containerd].orig
+++ File[/etc/logrotate.d/wmf_auto_restart_containerd]

+    owner  => root
+    mode   => 0444
+    ensure => absent
+    group  => root

Content differences:

--- /etc/logrotate.d/wmf_auto_restart_containerd.orig
+++ /etc/logrotate.d/wmf_auto_restart_containerd
@@ -0,0 +1,12 @@
+# logrotate(8) config for wmf_auto_restart_containerd
+
+/var/log/wmf_auto_restart_containerd/*.log {
+    daily
+    copytruncate
+    missingok
+    compress
+    delaycompress
+    notifempty
+    rotate 15
+    size 256M
+}

Systemd::Timer[docker-system-prune-all]

Parameters differences:

--- Systemd::Timer[docker-system-prune-all].orig
+++ Systemd::Timer[docker-system-prune-all]

+    fixed_random_delay => False
+    accuracy           => 15sec
+    timer_intervals    => [{'start': 'OnCalendar', 'interval': 'Sunday 3:00 UTC'}]
+    splay              => 3600
+    unit_name          => docker-system-prune-all.service
+    ensure             => present

File[/lib/systemd/system/docker-system-prune-all.timer]

Parameters differences:

--- File[/lib/systemd/system/docker-system-prune-all.timer].orig
+++ File[/lib/systemd/system/docker-system-prune-all.timer]

+    owner  => root
+    mode   => 0444
+    ensure => present
+    notify => Exec[systemd daemon-reload for docker-system-prune-all.timer (docker-system-prune-all.timer)]
+    group  => root

Content differences:

--- /lib/systemd/system/docker-system-prune-all.timer.orig
+++ /lib/systemd/system/docker-system-prune-all.timer
@@ -0,0 +1,12 @@
+[Unit]
+Description=Periodic execution of docker-system-prune-all.service
+
+[Timer]
+Unit=docker-system-prune-all.service
+# Accuracy sets the maximum time interval around the execution time we want to allow
+AccuracySec=15sec
+OnCalendar=Sunday 3:00 UTC
+RandomizedDelaySec=3600
+
+[Install]
+WantedBy=multi-user.target

Service[docker-system-prune-all.timer]

Parameters differences:

--- Service[docker-system-prune-all.timer].orig
+++ Service[docker-system-prune-all.timer]

+    ensure   => running
+    provider => systemd
+    enable   => True

File[/etc/logrotate.d/wmf_auto_restart_docker]

Parameters differences:

--- File[/etc/logrotate.d/wmf_auto_restart_docker].orig
+++ File[/etc/logrotate.d/wmf_auto_restart_docker]

+    owner  => root
+    mode   => 0444
+    ensure => absent
+    group  => root

Content differences:

--- /etc/logrotate.d/wmf_auto_restart_docker.orig
+++ /etc/logrotate.d/wmf_auto_restart_docker
@@ -0,0 +1,12 @@
+# logrotate(8) config for wmf_auto_restart_docker
+
+/var/log/wmf_auto_restart_docker/*.log {
+    daily
+    copytruncate
+    missingok
+    compress
+    delaycompress
+    notifempty
+    rotate 15
+    size 256M
+}

File[/etc/logrotate.d/docker-system-prune-dangling]

Parameters differences:

--- File[/etc/logrotate.d/docker-system-prune-dangling].orig
+++ File[/etc/logrotate.d/docker-system-prune-dangling]

+    owner  => root
+    mode   => 0444
+    ensure => present
+    group  => root

Content differences:

--- /etc/logrotate.d/docker-system-prune-dangling.orig
+++ /etc/logrotate.d/docker-system-prune-dangling
@@ -0,0 +1,12 @@
+# logrotate(8) config for docker-system-prune-dangling
+
+/var/log/docker-system-prune-dangling/*.log {
+    daily
+    copytruncate
+    missingok
+    compress
+    delaycompress
+    notifempty
+    rotate 15
+    size 256M
+}

Systemd::Unit[wmf_auto_restart_docker.timer]

Parameters differences:

--- Systemd::Unit[wmf_auto_restart_docker.timer].orig
+++ Systemd::Unit[wmf_auto_restart_docker.timer]

+    restart           => False
+    override          => False
+    unit              => wmf_auto_restart_docker.timer
+    require           => ['Class[Systemd]']
+    ensure            => absent
+    override_filename => puppet-override.conf

Systemd::Timer[docker-system-prune-dangling]

Parameters differences:

--- Systemd::Timer[docker-system-prune-dangling].orig
+++ Systemd::Timer[docker-system-prune-dangling]

+    fixed_random_delay => False
+    accuracy           => 15sec
+    timer_intervals    => [{'start': 'OnCalendar', 'interval': 'Mon-Sat 3:00 UTC'}]
+    splay              => 3600
+    unit_name          => docker-system-prune-dangling.service
+    ensure             => present

Systemd::Unit[wmf_auto_restart_containerd.timer]

Parameters differences:

--- Systemd::Unit[wmf_auto_restart_containerd.timer].orig
+++ Systemd::Unit[wmf_auto_restart_containerd.timer]

+    restart           => False
+    override          => False
+    unit              => wmf_auto_restart_containerd.timer
+    require           => ['Class[Systemd]']
+    ensure            => absent
+    override_filename => puppet-override.conf

File_line[auto_restart_file_presence_containerd]

Parameters differences:

--- File_line[auto_restart_file_presence_containerd].orig
+++ File_line[auto_restart_file_presence_containerd]

+    path    => /etc/debdeploy-client/autorestarts.conf
+    require => File[/etc/debdeploy-client/autorestarts.conf]
+    ensure  => absent
+    line    => containerd

Systemd::Unit[wmf_auto_restart_containerd.service]

Parameters differences:

--- Systemd::Unit[wmf_auto_restart_containerd.service].orig
+++ Systemd::Unit[wmf_auto_restart_containerd.service]

+    restart           => False
+    override          => False
+    unit              => wmf_auto_restart_containerd.service
+    require           => ['Class[Systemd]']
+    ensure            => absent
+    override_filename => puppet-override.conf

Systemd::Service[docker-system-prune-dangling]

Parameters differences:

--- Systemd::Service[docker-system-prune-dangling].orig
+++ Systemd::Service[docker-system-prune-dangling]

+    require                  => Systemd::Unit[docker-system-prune-dangling.service]
+    migration_task           => T407130
+    unit_type                => timer
+    monitoring_critical      => False
+    monitoring_enabled       => False
+    restart                  => False
+    override                 => False
+    service_params           => {}
+    monitoring_contact_group => admins
+    ensure                   => present

Exec[systemd daemon-reload for wmf_auto_restart_containerd.timer (wmf_auto_restart_containerd.timer)]

Parameters differences:

--- Exec[systemd daemon-reload for wmf_auto_restart_containerd.timer (wmf_auto_restart_containerd.timer)].orig
+++ Exec[systemd daemon-reload for wmf_auto_restart_containerd.timer (wmf_auto_restart_containerd.timer)]

+    command     => /bin/systemctl daemon-reload
+    refreshonly => True

Package[docker.io]

Parameters differences:

--- Package[docker.io].orig
+++ Package[docker.io]

+    ensure   => installed
+    provider => apt

Systemd::Unit[docker-system-prune-all.timer]

Parameters differences:

--- Systemd::Unit[docker-system-prune-all.timer].orig
+++ Systemd::Unit[docker-system-prune-all.timer]

+    restart           => False
+    override          => False
+    unit              => docker-system-prune-all.timer
+    require           => ['Class[Systemd]']
+    ensure            => present
+    override_filename => puppet-override.conf

Logrotate::Conf[wmf_auto_restart_containerd]

Parameters differences:

--- Logrotate::Conf[wmf_auto_restart_containerd].orig
+++ Logrotate::Conf[wmf_auto_restart_containerd]

+    ensure => absent

Logrotate::Conf[docker-system-prune-dangling]

Parameters differences:

--- Logrotate::Conf[docker-system-prune-dangling].orig
+++ Logrotate::Conf[docker-system-prune-dangling]

+    ensure => present

File[/lib/systemd/system/docker-system-prune-dangling.timer]

Parameters differences:

--- File[/lib/systemd/system/docker-system-prune-dangling.timer].orig
+++ File[/lib/systemd/system/docker-system-prune-dangling.timer]

+    owner  => root
+    mode   => 0444
+    ensure => present
+    notify => Exec[systemd daemon-reload for docker-system-prune-dangling.timer (docker-system-prune-dangling.timer)]
+    group  => root

Content differences:

--- /lib/systemd/system/docker-system-prune-dangling.timer.orig
+++ /lib/systemd/system/docker-system-prune-dangling.timer
@@ -0,0 +1,12 @@
+[Unit]
+Description=Periodic execution of docker-system-prune-dangling.service
+
+[Timer]
+Unit=docker-system-prune-dangling.service
+# Accuracy sets the maximum time interval around the execution time we want to allow
+AccuracySec=15sec
+OnCalendar=Mon-Sat 3:00 UTC
+RandomizedDelaySec=3600
+
+[Install]
+WantedBy=multi-user.target

Class[Adduser]

Parameters differences:

--- Class[Adduser].orig
+++ Class[Adduser]

@@
-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[starship]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[linux-sysctl-defaults]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[atop]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[nftables]', 'Package[conntrack]', 'Package[jenkins]', 'Package[envoyproxy]', 'Package[ruby-concurrent]', 'Package[ruby]', 'Package[libruby]', 'Package[puppet-agent]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[openjdk-21-jdk]', 'Package[rsync]']
+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[starship]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[linux-sysctl-defaults]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[atop]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[nftables]', 'Package[conntrack]', 'Package[jenkins]', 'Package[acl]', 'Package[docker.io]', 'Package[envoyproxy]', 'Package[ruby-concurrent]', 'Package[ruby]', 'Package[libruby]', 'Package[puppet-agent]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[openjdk-21-jdk]', 'Package[rsync]']

Profile::Auto_restarts::Service[containerd]

Parameters differences:

--- Profile::Auto_restarts::Service[containerd].orig
+++ Profile::Auto_restarts::Service[containerd]

+    ensure => absent

Rsyslog::Conf[docker-system-prune-dangling]

Parameters differences:

--- Rsyslog::Conf[docker-system-prune-dangling].orig
+++ Rsyslog::Conf[docker-system-prune-dangling]

+    require  => File[/var/log/docker-system-prune-dangling]
+    priority => 40
+    ensure   => present
+    mode     => 0444

File[/lib/systemd/system/docker-system-prune-dangling.service]

Parameters differences:

--- File[/lib/systemd/system/docker-system-prune-dangling.service].orig
+++ File[/lib/systemd/system/docker-system-prune-dangling.service]

+    owner  => root
+    mode   => 0444
+    ensure => present
+    notify => Exec[systemd daemon-reload for docker-system-prune-dangling.service (docker-system-prune-dangling.service)]
+    group  => root

Content differences:

--- /lib/systemd/system/docker-system-prune-dangling.service.orig
+++ /lib/systemd/system/docker-system-prune-dangling.service
@@ -0,0 +1,8 @@
+[Unit]
+Description=Prune dangling Docker images
+Documentation=https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state
+
+[Service]
+Type=oneshot
+User=root
+ExecStart=/usr/bin/docker system prune --force

File[/etc/rsyslog.d/40-wmf-auto-restart-containerd.conf]

Parameters differences:

--- File[/etc/rsyslog.d/40-wmf-auto-restart-containerd.conf].orig
+++ File[/etc/rsyslog.d/40-wmf-auto-restart-containerd.conf]

+    owner  => root
+    mode   => 0444
+    ensure => absent
+    notify => Service[rsyslog]
+    group  => root

Content differences:

--- /etc/rsyslog.d/40-wmf-auto-restart-containerd.conf.orig
+++ /etc/rsyslog.d/40-wmf-auto-restart-containerd.conf
@@ -0,0 +1,10 @@
+# rsyslog.conf(5) configuration file for services.
+# This file is managed by Puppet.
+if $programname startswith "wmf_auto_restart_containerd" then {
+    action(
+        type="omfile" file="/var/log/wmf_auto_restart_containerd/syslog.log"
+        fileOwner="root" fileGroup="root"
+        fileCreateMode="0644"
+    )
+    & stop
+}

Systemd::Syslog[wmf_auto_restart_docker]

Parameters differences:

--- Systemd::Syslog[wmf_auto_restart_docker].orig
+++ Systemd::Syslog[wmf_auto_restart_docker]

+    owner                  => root
+    readable_by            => all
+    force_stop             => True
+    programname_comparison => startswith
+    log_filename           => syslog.log
+    group                  => root
+    base_dir               => /var/log
+    ensure                 => absent

Exec[systemd daemon-reload for docker-system-prune-dangling.service (docker-system-prune-dangling.service)]

Parameters differences:

--- Exec[systemd daemon-reload for docker-system-prune-dangling.service (docker-system-prune-dangling.service)].orig
+++ Exec[systemd daemon-reload for docker-system-prune-dangling.service (docker-system-prune-dangling.service)]

+    command     => /bin/systemctl daemon-reload
+    refreshonly => True

Systemd::Syslog[wmf_auto_restart_containerd]

Parameters differences:

--- Systemd::Syslog[wmf_auto_restart_containerd].orig
+++ Systemd::Syslog[wmf_auto_restart_containerd]

+    owner                  => root
+    readable_by            => all
+    force_stop             => True
+    programname_comparison => startswith
+    log_filename           => syslog.log
+    group                  => root
+    base_dir               => /var/log
+    ensure                 => absent

Systemd::Timer::Job[docker-system-prune-dangling]

Parameters differences:

--- Systemd::Timer::Job[docker-system-prune-dangling].orig
+++ Systemd::Timer::Job[docker-system-prune-dangling]

+    syslog_force_stop         => True
+    private_tmp               => False
+    monitoring_contact_groups => admins
+    logfile_basedir           => /var/log
+    syslog_match_startswith   => True
+    monitoring_notes_url      => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state
+    logfile_group             => root
+    logfile_name              => syslog.log
+    logging_enabled           => True
+    environment               => {}
+    splay                     => 3600
+    ensure                    => present
+    user                      => root
+    ignore_errors             => False
+    send_mail                 => False
+    fixed_random_delay        => False
+    description               => Prune dangling Docker images
+    success_exit_status       => []
+    send_mail_only_on_error   => True
+    command                   => /usr/bin/docker system prune --force
+    send_mail_to              => root@contint2003.wikimedia.org
+    logfile_perms             => all
+    interval                  => {'start': 'OnCalendar', 'interval': 'Mon-Sat 3:00 UTC'}
+    monitoring_enabled        => False

Service[docker-system-prune-dangling.timer]

Parameters differences:

--- Service[docker-system-prune-dangling.timer].orig
+++ Service[docker-system-prune-dangling.timer]

+    ensure   => running
+    provider => systemd
+    enable   => True

Profile::Auto_restarts::Service[docker]

Parameters differences:

--- Profile::Auto_restarts::Service[docker].orig
+++ Profile::Auto_restarts::Service[docker]

+    ensure => absent

File[/lib/systemd/system/wmf_auto_restart_docker.timer]

Parameters differences:

--- File[/lib/systemd/system/wmf_auto_restart_docker.timer].orig
+++ File[/lib/systemd/system/wmf_auto_restart_docker.timer]

+    owner  => root
+    mode   => 0444
+    ensure => absent
+    notify => Exec[systemd daemon-reload for wmf_auto_restart_docker.timer (wmf_auto_restart_docker.timer)]
+    group  => root

Content differences:

--- /lib/systemd/system/wmf_auto_restart_docker.timer.orig
+++ /lib/systemd/system/wmf_auto_restart_docker.timer
@@ -0,0 +1,12 @@
+[Unit]
+Description=Periodic execution of wmf_auto_restart_docker.service
+
+[Timer]
+Unit=wmf_auto_restart_docker.service
+# Accuracy sets the maximum time interval around the execution time we want to allow
+AccuracySec=15sec
+OnCalendar=Mon,Tue,Wed,Thu,Fri *-*-* 8:20:00
+RandomizedDelaySec=0
+
+[Install]
+WantedBy=multi-user.target

Rsyslog::Conf[wmf_auto_restart_docker]

Parameters differences:

--- Rsyslog::Conf[wmf_auto_restart_docker].orig
+++ Rsyslog::Conf[wmf_auto_restart_docker]

+    require  => File[/var/log/wmf_auto_restart_docker]
+    priority => 40
+    ensure   => absent
+    mode     => 0444

Systemd::Unit[docker-system-prune-dangling.service]

Parameters differences:

--- Systemd::Unit[docker-system-prune-dangling.service].orig
+++ Systemd::Unit[docker-system-prune-dangling.service]

+    restart           => False
+    override          => False
+    unit              => docker-system-prune-dangling.service
+    require           => ['Class[Systemd]']
+    ensure            => present
+    override_filename => puppet-override.conf

File[/etc/rsyslog.d/40-wmf-auto-restart-docker.conf]

Parameters differences:

--- File[/etc/rsyslog.d/40-wmf-auto-restart-docker.conf].orig
+++ File[/etc/rsyslog.d/40-wmf-auto-restart-docker.conf]

+    owner  => root
+    mode   => 0444
+    ensure => absent
+    notify => Service[rsyslog]
+    group  => root

Content differences:

--- /etc/rsyslog.d/40-wmf-auto-restart-docker.conf.orig
+++ /etc/rsyslog.d/40-wmf-auto-restart-docker.conf
@@ -0,0 +1,10 @@
+# rsyslog.conf(5) configuration file for services.
+# This file is managed by Puppet.
+if $programname startswith "wmf_auto_restart_docker" then {
+    action(
+        type="omfile" file="/var/log/wmf_auto_restart_docker/syslog.log"
+        fileOwner="root" fileGroup="root"
+        fileCreateMode="0644"
+    )
+    & stop
+}

Service[wmf_auto_restart_docker.timer]

Parameters differences:

--- Service[wmf_auto_restart_docker.timer].orig
+++ Service[wmf_auto_restart_docker.timer]

+    before   => ['Exec[systemd daemon-reload for wmf_auto_restart_docker.timer (wmf_auto_restart_docker.timer)]']
+    ensure   => stopped
+    provider => systemd
+    enable   => False

Exec[systemd daemon-reload for docker-system-prune-all.service (docker-system-prune-all.service)]

Parameters differences:

--- Exec[systemd daemon-reload for docker-system-prune-all.service (docker-system-prune-all.service)].orig
+++ Exec[systemd daemon-reload for docker-system-prune-all.service (docker-system-prune-all.service)]

+    command     => /bin/systemctl daemon-reload
+    refreshonly => True

Systemd::Service[wmf_auto_restart_containerd]

Parameters differences:

--- Systemd::Service[wmf_auto_restart_containerd].orig
+++ Systemd::Service[wmf_auto_restart_containerd]

+    require                  => Systemd::Unit[wmf_auto_restart_containerd.service]
+    migration_task           => T407130
+    unit_type                => timer
+    monitoring_critical      => False
+    monitoring_enabled       => False
+    restart                  => False
+    override                 => False
+    service_params           => {}
+    monitoring_contact_group => admins
+    ensure                   => absent

Class[Profile::Docker::Prune]

Parameters differences:

--- Class[Profile::Docker::Prune].orig
+++ Class[Profile::Docker::Prune]

+    ensure => present

File[/lib/systemd/system/docker-system-prune-all.service]

Parameters differences:

--- File[/lib/systemd/system/docker-system-prune-all.service].orig
+++ File[/lib/systemd/system/docker-system-prune-all.service]

+    owner  => root
+    mode   => 0444
+    ensure => present
+    notify => Exec[systemd daemon-reload for docker-system-prune-all.service (docker-system-prune-all.service)]
+    group  => root

Content differences:

--- /lib/systemd/system/docker-system-prune-all.service.orig
+++ /lib/systemd/system/docker-system-prune-all.service
@@ -0,0 +1,8 @@
+[Unit]
+Description=Prune all Docker images and volumes
+Documentation=https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state
+
+[Service]
+Type=oneshot
+User=root
+ExecStart=/usr/bin/docker system prune --all --volumes --force

Systemd::Syslog[docker-system-prune-dangling]

Parameters differences:

--- Systemd::Syslog[docker-system-prune-dangling].orig
+++ Systemd::Syslog[docker-system-prune-dangling]

+    owner                  => root
+    readable_by            => all
+    force_stop             => True
+    programname_comparison => startswith
+    log_filename           => syslog.log
+    group                  => root
+    base_dir               => /var/log
+    ensure                 => present

Class[Profile::Apt]

Parameters differences:

--- Class[Profile::Apt].orig
+++ Class[Profile::Apt]

@@
-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[starship]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[linux-sysctl-defaults]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[atop]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[nftables]', 'Package[conntrack]', 'Package[jenkins]', 'Package[envoyproxy]', 'Package[ruby-concurrent]', 'Package[ruby]', 'Package[libruby]', 'Package[puppet-agent]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[openjdk-21-jdk]', 'Package[rsync]']
+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[starship]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[linux-sysctl-defaults]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[atop]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[nftables]', 'Package[conntrack]', 'Package[jenkins]', 'Package[acl]', 'Package[docker.io]', 'Package[envoyproxy]', 'Package[ruby-concurrent]', 'Package[ruby]', 'Package[libruby]', 'Package[puppet-agent]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[openjdk-21-jdk]', 'Package[rsync]']

Exec[systemd daemon-reload for wmf_auto_restart_containerd.service (wmf_auto_restart_containerd.service)]

Parameters differences:

--- Exec[systemd daemon-reload for wmf_auto_restart_containerd.service (wmf_auto_restart_containerd.service)].orig
+++ Exec[systemd daemon-reload for wmf_auto_restart_containerd.service (wmf_auto_restart_containerd.service)]

+    command     => /bin/systemctl daemon-reload
+    refreshonly => True

Exec[systemd daemon-reload for docker-system-prune-dangling.timer (docker-system-prune-dangling.timer)]

Parameters differences:

--- Exec[systemd daemon-reload for docker-system-prune-dangling.timer (docker-system-prune-dangling.timer)].orig
+++ Exec[systemd daemon-reload for docker-system-prune-dangling.timer (docker-system-prune-dangling.timer)]

+    before      => ['Service[docker-system-prune-dangling.timer]']
+    command     => /bin/systemctl daemon-reload
+    refreshonly => True

Ferm::Conf[docker-ferm]

Parameters differences:

--- Ferm::Conf[docker-ferm].orig
+++ Ferm::Conf[docker-ferm]

+    prio   => 20
+    source => puppet:///modules/profile/ci/docker-ferm
+    ensure => present

Exec[systemd daemon-reload for wmf_auto_restart_docker.service (wmf_auto_restart_docker.service)]

Parameters differences:

--- Exec[systemd daemon-reload for wmf_auto_restart_docker.service (wmf_auto_restart_docker.service)].orig
+++ Exec[systemd daemon-reload for wmf_auto_restart_docker.service (wmf_auto_restart_docker.service)]

+    command     => /bin/systemctl daemon-reload
+    refreshonly => True

File[/var/log/wmf_auto_restart_docker]

Parameters differences:

--- File[/var/log/wmf_auto_restart_docker].orig
+++ File[/var/log/wmf_auto_restart_docker]

+    owner  => root
+    force  => True
+    mode   => 0755
+    backup => False
+    ensure => absent
+    group  => root

Rsyslog::Conf[docker-system-prune-all]

Parameters differences:

--- Rsyslog::Conf[docker-system-prune-all].orig
+++ Rsyslog::Conf[docker-system-prune-all]

+    require  => File[/var/log/docker-system-prune-all]
+    priority => 40
+    ensure   => present
+    mode     => 0444

Package[acl]

Parameters differences:

--- Package[acl].orig
+++ Package[acl]

+    ensure   => installed
+    provider => apt

Compilation results for contint2003.wikimedia.org: System changes detected

Catalog differences

Summary

Resources only in the new catalog

Resources modified

Relevant files