{"host": "cumin1003.eqiad.wmnet", "state": "core_diff", "description": "Differences to core resources", "diff": {"full": {"total": 3681, "only_in_self": [], "only_in_other": ["Class[Profile::Cluster::Management::Firmwares]", "Class[Rsync::Server::Stunnel]", "Class[Rsync::Server]", "Concat::Fragment[/etc/rsyncd.conf-header]", "Concat::Fragment[/etc/rsyncd.conf-srv_firmwares]", "Concat[/etc/rsyncd.conf]", "Concat_file[/etc/rsyncd.conf]", "Concat_fragment[/etc/rsyncd.conf-header]", "Concat_fragment[/etc/rsyncd.conf-srv_firmwares]", "Exec[systemd daemon-reload for rsync-srv_firmwares.service (rsync-srv_firmwares.service)]", "Exec[systemd daemon-reload for rsync-srv_firmwares.timer (rsync-srv_firmwares.timer)]", "File[/etc/default/rsync]", "File[/etc/logrotate.d/rsync-srv_firmwares]", "File[/etc/nftables/input/10_rsyncd_access_srv_firmwares.nft]", "File[/etc/rsync.d]", "File[/etc/rsyslog.d/40-rsync-srv-firmwares.conf]", "File[/etc/stunnel/rsync.conf]", "File[/lib/systemd/system/rsync-srv_firmwares.service]", "File[/lib/systemd/system/rsync-srv_firmwares.timer]", "File[/var/log/rsync-srv_firmwares]", "File_line[enable_stunnel]", "Firewall::Service[rsyncd_access_srv_firmwares]", "Logrotate::Conf[rsync-srv_firmwares]", "Nftables::Service[rsyncd_access_srv_firmwares]", "Package[rsync]", "Package[stunnel4]", "Rsync::Quickdatacopy[srv_firmwares]", "Rsync::Server::Module[srv_firmwares]", "Rsyslog::Conf[rsync-srv_firmwares]", "Service[rsync-srv_firmwares.timer]", "Service[rsync]", "Service[stunnel4]", "Systemd::Service[rsync-srv_firmwares]", "Systemd::Syslog[rsync-srv_firmwares]", "Systemd::Timer::Job[rsync-srv_firmwares]", "Systemd::Timer[rsync-srv_firmwares]", "Systemd::Unit[rsync-srv_firmwares.service]", "Systemd::Unit[rsync-srv_firmwares.timer]"], "resource_diffs": [{"resource": "Firewall::Service[rsyncd_access_srv_firmwares]", "parameters": "--- Firewall::Service[rsyncd_access_srv_firmwares].orig\n+++ Firewall::Service[rsyncd_access_srv_firmwares]\n\n+    desc    => \n+    notrack => False\n+    port    => [873, 1873]\n+    srange  => ['cumin2002.codfw.wmnet']\n+    ensure  => present\n+    prio    => 10\n+    proto   => tcp\n"}, {"resource": "Systemd::Service[rsync-srv_firmwares]", "parameters": "--- Systemd::Service[rsync-srv_firmwares].orig\n+++ Systemd::Service[rsync-srv_firmwares]\n\n+    monitoring_critical      => False\n+    monitoring_contact_group => admins\n+    migration_task           => T407130\n+    service_params           => {}\n+    ensure                   => absent\n+    override                 => False\n+    restart                  => False\n+    monitoring_enabled       => False\n+    require                  => Systemd::Unit[rsync-srv_firmwares.service]\n+    unit_type                => timer\n"}, {"resource": "File[/etc/stunnel/rsync.conf]", "content": "--- /etc/stunnel/rsync.conf.orig\n+++ /etc/stunnel/rsync.conf\n@@ -0,0 +1,14 @@\n+# This file is managed by puppet\n+\n+[rsync]\n+accept = :::1873\n+client = no\n+\n+CAfile = /var/lib/puppet/ssl/certs/ca.pem\n+cert   = /var/lib/puppet/ssl/certs/cumin1003.eqiad.wmnet.pem\n+key    = /var/lib/puppet/ssl/private_keys/cumin1003.eqiad.wmnet.pem\n+\n+verifyChain = yes\n+\n+exec = /usr/bin/rsync\n+execargs = rsync --daemon --config /etc/rsyncd.conf", "parameters": "--- File[/etc/stunnel/rsync.conf].orig\n+++ File[/etc/stunnel/rsync.conf]\n\n+    ensure => present\n+    group  => root\n+    mode   => 0444\n+    owner  => root\n"}, {"resource": "File[/etc/rsyslog.d/40-rsync-srv-firmwares.conf]", "content": "--- /etc/rsyslog.d/40-rsync-srv-firmwares.conf.orig\n+++ /etc/rsyslog.d/40-rsync-srv-firmwares.conf\n@@ -0,0 +1,10 @@\n+# rsyslog.conf(5) configuration file for services.\n+# This file is managed by Puppet.\n+if $programname startswith \"rsync-srv_firmwares\" then {\n+    action(\n+        type=\"omfile\" file=\"/var/log/rsync-srv_firmwares/syslog.log\"\n+        fileOwner=\"root\" fileGroup=\"root\"\n+        fileCreateMode=\"0644\"\n+    )\n+    & stop\n+}", "parameters": "--- File[/etc/rsyslog.d/40-rsync-srv-firmwares.conf].orig\n+++ File[/etc/rsyslog.d/40-rsync-srv-firmwares.conf]\n\n+    group  => root\n+    mode   => 0444\n+    owner  => root\n+    ensure => absent\n+    notify => Service[rsyslog]\n"}, {"resource": "Logrotate::Conf[rsync-srv_firmwares]", "parameters": "--- Logrotate::Conf[rsync-srv_firmwares].orig\n+++ Logrotate::Conf[rsync-srv_firmwares]\n\n+    ensure => absent\n"}, {"resource": "File[/etc/logrotate.d/rsync-srv_firmwares]", "content": "--- /etc/logrotate.d/rsync-srv_firmwares.orig\n+++ /etc/logrotate.d/rsync-srv_firmwares\n@@ -0,0 +1,12 @@\n+# logrotate(8) config for rsync-srv_firmwares\n+\n+/var/log/rsync-srv_firmwares/*.log {\n+    daily\n+    copytruncate\n+    missingok\n+    compress\n+    delaycompress\n+    notifempty\n+    rotate 15\n+    size 256M\n+}", "parameters": "--- File[/etc/logrotate.d/rsync-srv_firmwares].orig\n+++ File[/etc/logrotate.d/rsync-srv_firmwares]\n\n+    ensure => absent\n+    group  => root\n+    mode   => 0444\n+    owner  => root\n"}, {"resource": "Service[rsync-srv_firmwares.timer]", "parameters": "--- Service[rsync-srv_firmwares.timer].orig\n+++ Service[rsync-srv_firmwares.timer]\n\n+    ensure   => stopped\n+    before   => ['Exec[systemd daemon-reload for rsync-srv_firmwares.timer (rsync-srv_firmwares.timer)]']\n+    enable   => False\n+    provider => systemd\n"}, {"resource": "Class[Adduser]", "parameters": "--- Class[Adduser].orig\n+++ Class[Adduser]\n\n@@\n-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[atop]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[eject]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[nftables]', 'Package[conntrack]', 'Package[clustershell]', 'Package[cumin]', 'Package[python3-dnspython]', 'Package[python3-phabricator]', 'Package[python3-requests]', 'Package[python3-dbg]', 'Package[ipmitool]', 'Package[python3-conftool]', 'Package[python3-conftool-dbctl]', 'Package[etcd-client]', 'Package[spicerack]', 'Package[python3-prettytable]', 'Package[python3-packaging]', 'Package[python3-gitlab]', 'Package[transferpy]', 'Package[python3-aiohttp]', 'Package[python3-cryptography]', 'Package[python3-snappy]', 'Package[python3-scapy]', 'Package[debdeploy-server]', 'Package[httpbb]', 'Package[wmf-mariadb106-client]', 'Package[percona-toolkit]', 'Package[grc]', 'Package[python3-pymysql]', 'Package[python3-tabulate]', 'Package[mariadb-backup]', 'Package[python3-wmfmariadbpy]', 'Package[wmfmariadbpy-admin]', 'Package[wmfdb-admin]', 'Package[wmfbackups-remote]', 'Package[ripe-atlas-tools]', 'Package[bacula-fd]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[virtualenv]', 'Package[make]']\n+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[atop]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[eject]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[nftables]', 'Package[conntrack]', 'Package[clustershell]', 'Package[cumin]', 'Package[python3-dnspython]', 'Package[python3-phabricator]', 'Package[python3-requests]', 'Package[python3-dbg]', 'Package[ipmitool]', 'Package[python3-conftool]', 'Package[python3-conftool-dbctl]', 'Package[etcd-client]', 'Package[spicerack]', 'Package[python3-prettytable]', 'Package[python3-packaging]', 'Package[python3-gitlab]', 'Package[transferpy]', 'Package[python3-aiohttp]', 'Package[python3-cryptography]', 'Package[python3-snappy]', 'Package[python3-scapy]', 'Package[debdeploy-server]', 'Package[httpbb]', 'Package[wmf-mariadb106-client]', 'Package[percona-toolkit]', 'Package[grc]', 'Package[python3-pymysql]', 'Package[python3-tabulate]', 'Package[mariadb-backup]', 'Package[python3-wmfmariadbpy]', 'Package[wmfmariadbpy-admin]', 'Package[wmfdb-admin]', 'Package[wmfbackups-remote]', 'Package[ripe-atlas-tools]', 'Package[bacula-fd]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[virtualenv]', 'Package[make]', 'Package[rsync]', 'Package[stunnel4]']\n"}, {"resource": "Systemd::Unit[rsync-srv_firmwares.timer]", "parameters": "--- Systemd::Unit[rsync-srv_firmwares.timer].orig\n+++ Systemd::Unit[rsync-srv_firmwares.timer]\n\n+    unit              => rsync-srv_firmwares.timer\n+    override_filename => puppet-override.conf\n+    require           => ['Class[Systemd]']\n+    ensure            => absent\n+    override          => False\n+    restart           => False\n"}, {"resource": "Rsync::Quickdatacopy[srv_firmwares]", "parameters": "--- Rsync::Quickdatacopy[srv_firmwares].orig\n+++ Rsync::Quickdatacopy[srv_firmwares]\n\n+    dest_host                  => cumin2002.codfw.wmnet\n+    progress                   => False\n+    source_host                => cumin1003.eqiad.wmnet\n+    ensure                     => present\n+    auto_interval              => {'start': 'OnCalendar', 'interval': '*-*-* *:00/10:00'}\n+    delete                     => True\n+    auto_sync                  => True\n+    server_uses_stunnel        => True\n+    module_path                => /srv/firmware\n+    ignore_missing_file_errors => False\n"}, {"resource": "Exec[systemd daemon-reload for rsync-srv_firmwares.service (rsync-srv_firmwares.service)]", "parameters": "--- Exec[systemd daemon-reload for rsync-srv_firmwares.service (rsync-srv_firmwares.service)].orig\n+++ Exec[systemd daemon-reload for rsync-srv_firmwares.service (rsync-srv_firmwares.service)]\n\n+    refreshonly => True\n+    command     => /bin/systemctl daemon-reload\n"}, {"resource": "Exec[systemd daemon-reload for rsync-srv_firmwares.timer (rsync-srv_firmwares.timer)]", "parameters": "--- Exec[systemd daemon-reload for rsync-srv_firmwares.timer (rsync-srv_firmwares.timer)].orig\n+++ Exec[systemd daemon-reload for rsync-srv_firmwares.timer (rsync-srv_firmwares.timer)]\n\n+    refreshonly => True\n+    command     => /bin/systemctl daemon-reload\n"}, {"resource": "Class[Profile::Cluster::Management::Firmwares]", "parameters": "--- Class[Profile::Cluster::Management::Firmwares].orig\n+++ Class[Profile::Cluster::Management::Firmwares]\n\n+    dest_host   => cumin2002.codfw.wmnet\n+    source_host => cumin1003.eqiad.wmnet\n"}, {"resource": "Service[rsync]", "parameters": "--- Service[rsync].orig\n+++ Service[rsync]\n\n+    ensure    => running\n+    enable    => True\n+    subscribe => ['Concat[/etc/rsyncd.conf]', 'File[/etc/default/rsync]']\n+    require   => Package[rsync]\n"}, {"resource": "Concat_fragment[/etc/rsyncd.conf-header]", "content": "--- /etc/rsyncd.conf-header.orig\n+++ /etc/rsyncd.conf-header\n@@ -0,0 +1,11 @@\n+# This file is being maintained by Puppet.\n+# DO NOT EDIT\n+\n+uid = nobody\n+gid = nogroup\n+use chroot = yes\n+\n+log format = %t %a %m %f %b\n+syslog facility = local3\n+timeout = 300\n+address = 0.0.0.0", "parameters": "--- Concat_fragment[/etc/rsyncd.conf-header].orig\n+++ Concat_fragment[/etc/rsyncd.conf-header]\n\n+    tag    => _etc_rsyncd.conf\n+    target => /etc/rsyncd.conf\n+    order  => 01\n"}, {"resource": "Concat[/etc/rsyncd.conf]", "parameters": "--- Concat[/etc/rsyncd.conf].orig\n+++ Concat[/etc/rsyncd.conf]\n\n+    group          => root\n+    path           => /etc/rsyncd.conf\n+    backup         => puppet\n+    mode           => 0444\n+    owner          => root\n+    ensure         => present\n+    replace        => True\n+    order          => alpha\n+    force          => False\n+    ensure_newline => False\n+    format         => plain\n+    warn           => False\n+    show_diff      => True\n"}, {"resource": "Systemd::Timer[rsync-srv_firmwares]", "parameters": "--- Systemd::Timer[rsync-srv_firmwares].orig\n+++ Systemd::Timer[rsync-srv_firmwares]\n\n+    accuracy           => 15sec\n+    unit_name          => rsync-srv_firmwares.service\n+    fixed_random_delay => False\n+    ensure             => absent\n+    timer_intervals    => [{'start': 'OnCalendar', 'interval': '*-*-* *:00/10:00'}]\n+    splay              => 0\n"}, {"resource": "File[/etc/rsync.d]", "parameters": "--- File[/etc/rsync.d].orig\n+++ File[/etc/rsync.d]\n\n+    group   => root\n+    recurse => True\n+    owner   => root\n+    ensure  => absent\n+    force   => True\n+    purge   => True\n"}, {"resource": "File[/lib/systemd/system/rsync-srv_firmwares.timer]", "content": "--- /lib/systemd/system/rsync-srv_firmwares.timer.orig\n+++ /lib/systemd/system/rsync-srv_firmwares.timer\n@@ -0,0 +1,12 @@\n+[Unit]\n+Description=Periodic execution of rsync-srv_firmwares.service\n+\n+[Timer]\n+Unit=rsync-srv_firmwares.service\n+# Accuracy sets the maximum time interval around the execution time we want to allow\n+AccuracySec=15sec\n+OnCalendar=*-*-* *:00/10:00\n+RandomizedDelaySec=0\n+\n+[Install]\n+WantedBy=multi-user.target", "parameters": "--- File[/lib/systemd/system/rsync-srv_firmwares.timer].orig\n+++ File[/lib/systemd/system/rsync-srv_firmwares.timer]\n\n+    group  => root\n+    mode   => 0444\n+    owner  => root\n+    ensure => absent\n+    notify => Exec[systemd daemon-reload for rsync-srv_firmwares.timer (rsync-srv_firmwares.timer)]\n"}, {"resource": "Systemd::Timer::Job[rsync-srv_firmwares]", "parameters": "--- Systemd::Timer::Job[rsync-srv_firmwares].orig\n+++ Systemd::Timer::Job[rsync-srv_firmwares]\n\n+    monitoring_contact_groups => admins\n+    command                   => /usr/local/sbin/sync-srv_firmwares\n+    monitoring_notes_url      => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state\n+    ignore_errors             => False\n+    environment               => {}\n+    success_exit_status       => []\n+    monitoring_enabled        => False\n+    description               => Transfer data periodically between hosts\n+    user                      => root\n+    syslog_force_stop         => True\n+    send_mail_only_on_error   => True\n+    logging_enabled           => True\n+    send_mail                 => False\n+    logfile_basedir           => /var/log\n+    ensure                    => absent\n+    logfile_perms             => all\n+    interval                  => {'start': 'OnCalendar', 'interval': '*-*-* *:00/10:00'}\n+    syslog_match_startswith   => True\n+    logfile_name              => syslog.log\n+    fixed_random_delay        => False\n+    private_tmp               => False\n+    logfile_group             => root\n+    send_mail_to              => root@cumin1003.eqiad.wmnet\n"}, {"resource": "File_line[enable_stunnel]", "parameters": "--- File_line[enable_stunnel].orig\n+++ File_line[enable_stunnel]\n\n+    path     => /etc/default/stunnel4\n+    match    => ^ENABLED=\n+    multiple => False\n+    ensure   => present\n+    line     => ENABLED=1  # Managed by puppet\n"}, {"resource": "Concat::Fragment[/etc/rsyncd.conf-header]", "parameters": "--- Concat::Fragment[/etc/rsyncd.conf-header].orig\n+++ Concat::Fragment[/etc/rsyncd.conf-header]\n\n+    order  => 01\n+    target => /etc/rsyncd.conf\n"}, {"resource": "Rsyslog::Conf[rsync-srv_firmwares]", "parameters": "--- Rsyslog::Conf[rsync-srv_firmwares].orig\n+++ Rsyslog::Conf[rsync-srv_firmwares]\n\n+    ensure   => absent\n+    priority => 40\n+    mode     => 0444\n+    require  => File[/var/log/rsync-srv_firmwares]\n"}, {"resource": "Nftables::Service[rsyncd_access_srv_firmwares]", "parameters": "--- Nftables::Service[rsyncd_access_srv_firmwares].orig\n+++ Nftables::Service[rsyncd_access_srv_firmwares]\n\n+    desc    => \n+    notrack => False\n+    port    => [873, 1873]\n+    ensure  => present\n+    prio    => 10\n+    src_ips => ['10.192.32.49', '2620:0:860:103:10:192:32:49']\n+    proto   => tcp\n"}, {"resource": "Package[stunnel4]", "parameters": "--- Package[stunnel4].orig\n+++ Package[stunnel4]\n\n+    ensure   => installed\n+    provider => apt\n"}, {"resource": "File[/var/log/rsync-srv_firmwares]", "parameters": "--- File[/var/log/rsync-srv_firmwares].orig\n+++ File[/var/log/rsync-srv_firmwares]\n\n+    group  => root\n+    backup => False\n+    mode   => 0755\n+    owner  => root\n+    ensure => absent\n+    force  => True\n"}, {"resource": "File[/etc/nftables/input/10_rsyncd_access_srv_firmwares.nft]", "content": "--- /etc/nftables/input/10_rsyncd_access_srv_firmwares.nft.orig\n+++ /etc/nftables/input/10_rsyncd_access_srv_firmwares.nft\n@@ -0,0 +1,4 @@\n+# Managed by puppet\n+# \n+ip saddr { 10.192.32.49 } tcp dport { 873, 1873 } accept\n+ip6 saddr { 2620:0:860:103:10:192:32:49 } tcp dport { 873, 1873 } accept", "parameters": "--- File[/etc/nftables/input/10_rsyncd_access_srv_firmwares.nft].orig\n+++ File[/etc/nftables/input/10_rsyncd_access_srv_firmwares.nft]\n\n+    group  => root\n+    mode   => 0444\n+    owner  => root\n+    ensure => present\n+    tag    => nft\n+    notify => ['Service[nftables]']\n"}, {"resource": "File[/etc/default/rsync]", "content": "--- /etc/default/rsync.orig\n+++ /etc/default/rsync\n@@ -0,0 +1,46 @@\n+#####################################################################\n+### THIS FILE IS MANAGED BY PUPPET\n+### puppet:///rsync/rsync.default.erb\n+#####################################################################\n+\n+# defaults file for rsync daemon mode\n+\n+# start rsync in daemon mode from init.d script?\n+#  only allowed values are \"true\", \"false\", and \"inetd\"\n+#  Use \"inetd\" if you want to start the rsyncd from inetd,\n+#  all this does is prevent the init.d script from printing a message\n+#  about not starting rsyncd (you still need to modify inetd's config yourself).\n+RSYNC_ENABLE=true\n+\n+# which file should be used as the configuration file for rsync.\n+# This file is used instead of the default /etc/rsyncd.conf\n+# Warning: This option has no effect if the daemon is accessed\n+#          using a remote shell. When using a different file for\n+#          rsync you might want to symlink /etc/rsyncd.conf to\n+#          that file.\n+RSYNC_CONFIG_FILE=/etc/rsyncd.conf\n+\n+# what extra options to give rsync --daemon?\n+#  that excludes the --daemon; that's always done in the init.d script\n+#  Possibilities are:\n+#   --address=123.45.67.89\t\t(bind to a specific IP address)\n+#   --port=8730\t\t\t\t(bind to specified port; default 873)\n+RSYNC_OPTS=''\n+\n+# run rsyncd at a nice level?\n+#  the rsync daemon can impact performance due to much I/O and CPU usage,\n+#  so you may want to run it at a nicer priority than the default priority.\n+#  Allowed values are 0 - 19 inclusive; 10 is a reasonable value.\n+RSYNC_NICE=''\n+\n+# run rsyncd with ionice?\n+#  \"ionice\" does for IO load what \"nice\" does for CPU load.\n+#  As rsync is often used for backups which aren't all that time-critical,\n+#  reducing the rsync IO priority will benefit the rest of the system.\n+#  See the manpage for ionice for allowed options.\n+#  -c3 is recommended, this will run rsync IO at \"idle\" priority. Uncomment\n+#  the next line to activate this.\n+# RSYNC_IONICE='-c3'\n+\n+# Don't forget to create an appropriate config file,\n+# else the daemon will not start.", "parameters": "--- File[/etc/default/rsync].orig\n+++ File[/etc/default/rsync]\n\n+    ensure => present\n+    group  => root\n+    mode   => 0444\n+    owner  => root\n"}, {"resource": "Systemd::Unit[rsync-srv_firmwares.service]", "parameters": "--- Systemd::Unit[rsync-srv_firmwares.service].orig\n+++ Systemd::Unit[rsync-srv_firmwares.service]\n\n+    unit              => rsync-srv_firmwares.service\n+    override_filename => puppet-override.conf\n+    require           => ['Class[Systemd]']\n+    ensure            => absent\n+    override          => False\n+    restart           => False\n"}, {"resource": "Class[Profile::Apt]", "parameters": "--- Class[Profile::Apt].orig\n+++ Class[Profile::Apt]\n\n@@\n-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[atop]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[eject]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[nftables]', 'Package[conntrack]', 'Package[clustershell]', 'Package[cumin]', 'Package[python3-dnspython]', 'Package[python3-phabricator]', 'Package[python3-requests]', 'Package[python3-dbg]', 'Package[ipmitool]', 'Package[python3-conftool]', 'Package[python3-conftool-dbctl]', 'Package[etcd-client]', 'Package[spicerack]', 'Package[python3-prettytable]', 'Package[python3-packaging]', 'Package[python3-gitlab]', 'Package[transferpy]', 'Package[python3-aiohttp]', 'Package[python3-cryptography]', 'Package[python3-snappy]', 'Package[python3-scapy]', 'Package[debdeploy-server]', 'Package[httpbb]', 'Package[wmf-mariadb106-client]', 'Package[percona-toolkit]', 'Package[grc]', 'Package[python3-pymysql]', 'Package[python3-tabulate]', 'Package[mariadb-backup]', 'Package[python3-wmfmariadbpy]', 'Package[wmfmariadbpy-admin]', 'Package[wmfdb-admin]', 'Package[wmfbackups-remote]', 'Package[ripe-atlas-tools]', 'Package[bacula-fd]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[virtualenv]', 'Package[make]']\n+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[atop]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[eject]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[nftables]', 'Package[conntrack]', 'Package[clustershell]', 'Package[cumin]', 'Package[python3-dnspython]', 'Package[python3-phabricator]', 'Package[python3-requests]', 'Package[python3-dbg]', 'Package[ipmitool]', 'Package[python3-conftool]', 'Package[python3-conftool-dbctl]', 'Package[etcd-client]', 'Package[spicerack]', 'Package[python3-prettytable]', 'Package[python3-packaging]', 'Package[python3-gitlab]', 'Package[transferpy]', 'Package[python3-aiohttp]', 'Package[python3-cryptography]', 'Package[python3-snappy]', 'Package[python3-scapy]', 'Package[debdeploy-server]', 'Package[httpbb]', 'Package[wmf-mariadb106-client]', 'Package[percona-toolkit]', 'Package[grc]', 'Package[python3-pymysql]', 'Package[python3-tabulate]', 'Package[mariadb-backup]', 'Package[python3-wmfmariadbpy]', 'Package[wmfmariadbpy-admin]', 'Package[wmfdb-admin]', 'Package[wmfbackups-remote]', 'Package[ripe-atlas-tools]', 'Package[bacula-fd]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[virtualenv]', 'Package[make]', 'Package[rsync]', 'Package[stunnel4]']\n"}, {"resource": "Concat_fragment[/etc/rsyncd.conf-srv_firmwares]", "content": "--- /etc/rsyncd.conf-srv_firmwares.orig\n+++ /etc/rsyncd.conf-srv_firmwares\n@@ -0,0 +1,20 @@\n+# This file is being maintained by Puppet.\n+# DO NOT EDIT\n+\n+[ srv_firmwares ]\n+path            = /srv/firmware\n+read only       = yes\n+write only      = no\n+list            = yes\n+uid             = 0\n+gid             = 0\n+use chroot      = yes\n+\n+\n+max connections = 0\n+\n+\n+\n+\n+hosts allow = cumin2002.codfw.wmnet localhost\n+", "parameters": "--- Concat_fragment[/etc/rsyncd.conf-srv_firmwares].orig\n+++ Concat_fragment[/etc/rsyncd.conf-srv_firmwares]\n\n+    tag    => _etc_rsyncd.conf\n+    target => /etc/rsyncd.conf\n+    order  => 10\n"}, {"resource": "Package[rsync]", "parameters": "--- Package[rsync].orig\n+++ Package[rsync]\n\n+    ensure   => installed\n+    provider => apt\n"}, {"resource": "Service[stunnel4]", "parameters": "--- Service[stunnel4].orig\n+++ Service[stunnel4]\n\n+    ensure    => running\n+    enable    => True\n+    subscribe => ['Concat[/etc/rsyncd.conf]', 'File[/etc/default/rsync]', 'File[/etc/stunnel/rsync.conf]', 'File_line[enable_stunnel]', 'Package[stunnel4]']\n"}, {"resource": "Systemd::Syslog[rsync-srv_firmwares]", "parameters": "--- Systemd::Syslog[rsync-srv_firmwares].orig\n+++ Systemd::Syslog[rsync-srv_firmwares]\n\n+    log_filename           => syslog.log\n+    group                  => root\n+    programname_comparison => startswith\n+    owner                  => root\n+    ensure                 => absent\n+    force_stop             => True\n+    base_dir               => /var/log\n+    readable_by            => all\n"}, {"resource": "Concat_file[/etc/rsyncd.conf]", "parameters": "--- Concat_file[/etc/rsyncd.conf].orig\n+++ Concat_file[/etc/rsyncd.conf]\n\n+    group          => root\n+    backup         => puppet\n+    mode           => 0444\n+    owner          => root\n+    tag            => _etc_rsyncd.conf\n+    replace        => True\n+    order          => alpha\n+    ensure_newline => False\n+    format         => plain\n+    force          => False\n+    show_diff      => True\n"}, {"resource": "File[/lib/systemd/system/rsync-srv_firmwares.service]", "content": "--- /lib/systemd/system/rsync-srv_firmwares.service.orig\n+++ /lib/systemd/system/rsync-srv_firmwares.service\n@@ -0,0 +1,8 @@\n+[Unit]\n+Description=Transfer data periodically between hosts\n+Documentation=https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state\n+\n+[Service]\n+Type=oneshot\n+User=root\n+ExecStart=/usr/local/sbin/sync-srv_firmwares", "parameters": "--- File[/lib/systemd/system/rsync-srv_firmwares.service].orig\n+++ File[/lib/systemd/system/rsync-srv_firmwares.service]\n\n+    group  => root\n+    mode   => 0444\n+    owner  => root\n+    ensure => absent\n+    notify => Exec[systemd daemon-reload for rsync-srv_firmwares.service (rsync-srv_firmwares.service)]\n"}, {"resource": "Class[Rsync::Server]", "parameters": "--- Class[Rsync::Server].orig\n+++ Class[Rsync::Server]\n\n+    rsyncd_conf    => {}\n+    address        => 0.0.0.0\n+    ensure_service => running\n+    timeout        => 300\n+    use_chroot     => yes\n+    rsync_opts     => []\n"}, {"resource": "Concat::Fragment[/etc/rsyncd.conf-srv_firmwares]", "parameters": "--- Concat::Fragment[/etc/rsyncd.conf-srv_firmwares].orig\n+++ Concat::Fragment[/etc/rsyncd.conf-srv_firmwares]\n\n+    order  => 10\n+    target => /etc/rsyncd.conf\n"}, {"resource": "Rsync::Server::Module[srv_firmwares]", "parameters": "--- Rsync::Server::Module[srv_firmwares].orig\n+++ Rsync::Server::Module[srv_firmwares]\n\n+    path            => /srv/firmware\n+    auto_firewall   => True\n+    ensure          => present\n+    list            => yes\n+    lock_file       => /var/run/rsyncd.lock\n+    gid             => 0\n+    chroot          => True\n+    uid             => 0\n+    qos_low         => False\n+    read_only       => yes\n+    hosts_allow     => ['cumin2002.codfw.wmnet']\n+    max_connections => 0\n+    write_only      => no\n"}, {"resource": "Class[Rsync::Server::Stunnel]", "parameters": "--- Class[Rsync::Server::Stunnel].orig\n+++ Class[Rsync::Server::Stunnel]\n\n+    ensure         => present\n+    ensure_service => running\n"}], "perc_changed": "2.12%"}, "core": {"total": 3681, "only_in_self": [], "only_in_other": ["Concat[/etc/rsyncd.conf]", "Concat_file[/etc/rsyncd.conf]", "Concat_fragment[/etc/rsyncd.conf-header]", "Concat_fragment[/etc/rsyncd.conf-srv_firmwares]", "Exec[systemd daemon-reload for rsync-srv_firmwares.service (rsync-srv_firmwares.service)]", "Exec[systemd daemon-reload for rsync-srv_firmwares.timer (rsync-srv_firmwares.timer)]", "File[/etc/default/rsync]", "File[/etc/logrotate.d/rsync-srv_firmwares]", "File[/etc/nftables/input/10_rsyncd_access_srv_firmwares.nft]", "File[/etc/rsync.d]", "File[/etc/rsyslog.d/40-rsync-srv-firmwares.conf]", "File[/etc/stunnel/rsync.conf]", "File[/lib/systemd/system/rsync-srv_firmwares.service]", "File[/lib/systemd/system/rsync-srv_firmwares.timer]", "File[/var/log/rsync-srv_firmwares]", "File_line[enable_stunnel]", "Package[rsync]", "Package[stunnel4]", "Service[rsync-srv_firmwares.timer]", "Service[rsync]", "Service[stunnel4]"], "resource_diffs": [], "perc_changed": "0.57%"}, "main": {"total": 3681, "only_in_self": [], "only_in_other": ["Class[Profile::Cluster::Management::Firmwares]", "Class[Rsync::Server::Stunnel]", "Class[Rsync::Server]", "Concat::Fragment[/etc/rsyncd.conf-header]", "Concat::Fragment[/etc/rsyncd.conf-srv_firmwares]", "Concat[/etc/rsyncd.conf]", "Concat_file[/etc/rsyncd.conf]", "Concat_fragment[/etc/rsyncd.conf-header]", "Concat_fragment[/etc/rsyncd.conf-srv_firmwares]", "Exec[systemd daemon-reload for rsync-srv_firmwares.service (rsync-srv_firmwares.service)]", "Exec[systemd daemon-reload for rsync-srv_firmwares.timer (rsync-srv_firmwares.timer)]", "File[/etc/default/rsync]", "File[/etc/logrotate.d/rsync-srv_firmwares]", "File[/etc/nftables/input/10_rsyncd_access_srv_firmwares.nft]", "File[/etc/rsync.d]", "File[/etc/rsyslog.d/40-rsync-srv-firmwares.conf]", "File[/etc/stunnel/rsync.conf]", "File[/lib/systemd/system/rsync-srv_firmwares.service]", "File[/lib/systemd/system/rsync-srv_firmwares.timer]", "File[/var/log/rsync-srv_firmwares]", "File_line[enable_stunnel]", "Firewall::Service[rsyncd_access_srv_firmwares]", "Logrotate::Conf[rsync-srv_firmwares]", "Nftables::Service[rsyncd_access_srv_firmwares]", "Package[rsync]", "Package[stunnel4]", "Rsync::Quickdatacopy[srv_firmwares]", "Rsync::Server::Module[srv_firmwares]", "Rsyslog::Conf[rsync-srv_firmwares]", "Service[rsync-srv_firmwares.timer]", "Service[rsync]", "Service[stunnel4]", "Systemd::Service[rsync-srv_firmwares]", "Systemd::Syslog[rsync-srv_firmwares]", "Systemd::Timer::Job[rsync-srv_firmwares]", "Systemd::Timer[rsync-srv_firmwares]", "Systemd::Unit[rsync-srv_firmwares.service]", "Systemd::Unit[rsync-srv_firmwares.timer]"], "resource_diffs": [{"resource": "Class[Adduser]", "parameters": "--- Class[Adduser].orig\n+++ Class[Adduser]\n\n@@\n-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[atop]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[eject]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[nftables]', 'Package[conntrack]', 'Package[clustershell]', 'Package[cumin]', 'Package[python3-dnspython]', 'Package[python3-phabricator]', 'Package[python3-requests]', 'Package[python3-dbg]', 'Package[ipmitool]', 'Package[python3-conftool]', 'Package[python3-conftool-dbctl]', 'Package[etcd-client]', 'Package[spicerack]', 'Package[python3-prettytable]', 'Package[python3-packaging]', 'Package[python3-gitlab]', 'Package[transferpy]', 'Package[python3-aiohttp]', 'Package[python3-cryptography]', 'Package[python3-snappy]', 'Package[python3-scapy]', 'Package[debdeploy-server]', 'Package[httpbb]', 'Package[wmf-mariadb106-client]', 'Package[percona-toolkit]', 'Package[grc]', 'Package[python3-pymysql]', 'Package[python3-tabulate]', 'Package[mariadb-backup]', 'Package[python3-wmfmariadbpy]', 'Package[wmfmariadbpy-admin]', 'Package[wmfdb-admin]', 'Package[wmfbackups-remote]', 'Package[ripe-atlas-tools]', 'Package[bacula-fd]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[virtualenv]', 'Package[make]']\n+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[atop]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[eject]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[nftables]', 'Package[conntrack]', 'Package[clustershell]', 'Package[cumin]', 'Package[python3-dnspython]', 'Package[python3-phabricator]', 'Package[python3-requests]', 'Package[python3-dbg]', 'Package[ipmitool]', 'Package[python3-conftool]', 'Package[python3-conftool-dbctl]', 'Package[etcd-client]', 'Package[spicerack]', 'Package[python3-prettytable]', 'Package[python3-packaging]', 'Package[python3-gitlab]', 'Package[transferpy]', 'Package[python3-aiohttp]', 'Package[python3-cryptography]', 'Package[python3-snappy]', 'Package[python3-scapy]', 'Package[debdeploy-server]', 'Package[httpbb]', 'Package[wmf-mariadb106-client]', 'Package[percona-toolkit]', 'Package[grc]', 'Package[python3-pymysql]', 'Package[python3-tabulate]', 'Package[mariadb-backup]', 'Package[python3-wmfmariadbpy]', 'Package[wmfmariadbpy-admin]', 'Package[wmfdb-admin]', 'Package[wmfbackups-remote]', 'Package[ripe-atlas-tools]', 'Package[bacula-fd]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[virtualenv]', 'Package[make]', 'Package[rsync]', 'Package[stunnel4]']\n"}, {"resource": "Class[Profile::Apt]", "parameters": "--- Class[Profile::Apt].orig\n+++ Class[Profile::Apt]\n\n@@\n-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[atop]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[eject]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[nftables]', 'Package[conntrack]', 'Package[clustershell]', 'Package[cumin]', 'Package[python3-dnspython]', 'Package[python3-phabricator]', 'Package[python3-requests]', 'Package[python3-dbg]', 'Package[ipmitool]', 'Package[python3-conftool]', 'Package[python3-conftool-dbctl]', 'Package[etcd-client]', 'Package[spicerack]', 'Package[python3-prettytable]', 'Package[python3-packaging]', 'Package[python3-gitlab]', 'Package[transferpy]', 'Package[python3-aiohttp]', 'Package[python3-cryptography]', 'Package[python3-snappy]', 'Package[python3-scapy]', 'Package[debdeploy-server]', 'Package[httpbb]', 'Package[wmf-mariadb106-client]', 'Package[percona-toolkit]', 'Package[grc]', 'Package[python3-pymysql]', 'Package[python3-tabulate]', 'Package[mariadb-backup]', 'Package[python3-wmfmariadbpy]', 'Package[wmfmariadbpy-admin]', 'Package[wmfdb-admin]', 'Package[wmfbackups-remote]', 'Package[ripe-atlas-tools]', 'Package[bacula-fd]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[virtualenv]', 'Package[make]']\n+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[atop]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[eject]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[nftables]', 'Package[conntrack]', 'Package[clustershell]', 'Package[cumin]', 'Package[python3-dnspython]', 'Package[python3-phabricator]', 'Package[python3-requests]', 'Package[python3-dbg]', 'Package[ipmitool]', 'Package[python3-conftool]', 'Package[python3-conftool-dbctl]', 'Package[etcd-client]', 'Package[spicerack]', 'Package[python3-prettytable]', 'Package[python3-packaging]', 'Package[python3-gitlab]', 'Package[transferpy]', 'Package[python3-aiohttp]', 'Package[python3-cryptography]', 'Package[python3-snappy]', 'Package[python3-scapy]', 'Package[debdeploy-server]', 'Package[httpbb]', 'Package[wmf-mariadb106-client]', 'Package[percona-toolkit]', 'Package[grc]', 'Package[python3-pymysql]', 'Package[python3-tabulate]', 'Package[mariadb-backup]', 'Package[python3-wmfmariadbpy]', 'Package[wmfmariadbpy-admin]', 'Package[wmfdb-admin]', 'Package[wmfbackups-remote]', 'Package[ripe-atlas-tools]', 'Package[bacula-fd]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[virtualenv]', 'Package[make]', 'Package[rsync]', 'Package[stunnel4]']\n"}], "perc_changed": "1.09%"}}}