Skip to content

GitLab

  • Menu
Projects Groups Snippets
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • TPA team TPA team
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Issues 174
    • Issues 174
    • List
    • Boards
    • Service Desk
    • Milestones
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
  • Wiki
    • Wiki
  • Activity
  • Create a new issue
  • Issue Boards
Collapse sidebar
  • The Tor Project
  • TPA
  • TPA teamTPA team
  • Issues
  • #33449

Closed
Open
Created Feb 25, 2020 by anarcat@anarcatOwner

puppet: replace dsa_systemd with camptocamp systemd module

we currently have two systemd module in Puppet, dsa_systemd (from the Debian sysadmins) and camptocamp-systemd, from the Puppet forge.

the latter was imported as a dependency of the Prometheus module and it would be very hard to remove it from our codebase.

we should look at whether we can replace the dsa_systemd module with the forge systemd module instead. this would allow us to collaborate with a broader community and remove duplicate code from our monorepo.

ideally, we'd also provide the good DSA folks a procedure on how to perform the migration, since we'll have to do it anyways.

so far, I've found this transition:

dsa_systemd::linger { 'bridgescan': }

... becomes:

loginctl_user { 'tordnsel':
    linger => enabled,
}

we also use:

  • dsa_systemd::override
  • dsa_systemd::mask

we already use the camptocamp:

  • systemd::tmpfile
  • systemd::unit_file

... and we have various systemd files manually deployed in /lib and /etc

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
Time tracking