we currently have two systemd module in Puppet, dsa_systemd (from the Debian sysadmins) and [camptocamp-systemd](https://github.com/camptocamp/puppet-systemd/), from the Puppet forge. the latter was imported as a dependency of the Prometheus module and it would be very hard to remove it from our codebase. we should look at whether we can replace the dsa_systemd module with the forge systemd module instead. this would allow us to collaborate with a broader community and remove duplicate code from our monorepo. ideally, we'd also provide the good DSA folks a procedure on how to perform the migration, since we'll have to do it anyways. so far, I've found this transition: ``` dsa_systemd::linger { 'bridgescan': } ``` ... becomes: ``` loginctl_user { 'tordnsel': linger => enabled, } ``` we also use: - [x] `dsa_systemd::override` (to replace with `systemd::dropin_file` with a possible notify) - [x] `dsa_systemd::mask` - [x] `dsa_systemd` class which deploys two `mask` resources, and a cleanup cronjob, to be reviewed we already use the camptocamp: * `systemd::tmpfile` * `systemd::unit_file` ... and we have various systemd files manually deployed in `/lib` and `/etc`