Defined Type: systemd::manage_dropin

Defined in:
manifests/manage_dropin.pp

Overview

Creates a drop-in file for a systemd unit from a template

Examples:

drop in file to change Type and override ExecStart

systemd::manage_dropin { 'myconf.conf':
  ensure        => present,
  unit          => 'myservice.service',
  service_entry => {
    'Type'      => 'oneshot',
    'ExecStart' => ['', '/usr/bin/doit.sh'],
  },
}

drop in file to change a path unit and override TriggerLimitBurst

systemd::manage_dropin { 'triggerlimit.conf':
  ensure     => present,
  unit       => 'passwd.path',
  path_entry => {
    'TriggerLimitBurst' => 100,
  },
}

drop in file to override the LimitCORE for a service

systemd::manage_dropin { 'corelimit.conf':
  ensure     => present,
  unit       => 'rsyslog.conf',
  path_entry => {
    'LimitCORE' => 'infinity',
  },
}

make a noisy unit less noisy

systemd::manage_dropin { 'maxloglevel.conf':
  ensure        => present,
  unit          => 'chatty.service',
  service_entry => {
    'LogLevelMax' => 'warning',
  }
}

have a unit instance auto run before user-<uid>.service

systemd::manage_dropin { 'user-aklog.conf':
  unit => 'user@.service',
  unit_entry => {
    'After'    => 'user-aklog@%i.service',
    'Requires' => 'user-aklog@%i.service'
  }
}

set memory limits on the user slices

systemd::manage_dropin { 'userlimits.conf':
  unit        => 'user-.slice',
  slice_entry => {
    MemoryMax        => '10G',
    MemoryAccounting => true,
  }
}

set IO limits on two devices

systemd::manage_dropin { 'devicelimits.conf':
  unit          =>  'special.service',
  service_entry => {
   'IOReadIOPSMax' => [
     ['/dev/afs',100],
     ['/dev/gluster','1000K'],
   ],
  },
}

Parameters:

  • unit (Systemd::Unit) —

    The unit to create a dropfile for

  • filename (Systemd::Dropin) (defaults to: $name) —

    The target unit file to create. The filename of the drop in. The full path is determined using the path, unit and this filename.

  • ensure (Enum['present', 'absent']) (defaults to: 'present') —

    The state of this dropin file

  • path (Stdlib::Absolutepath) (defaults to: '/etc/systemd/system') —

    The main systemd configuration path

  • selinux_ignore_defaults (Boolean) (defaults to: false) —

    If Puppet should ignore the default SELinux labels

  • owner (String) (defaults to: 'root') —

    The owner to set on the dropin file

  • group (String) (defaults to: 'root') —

    The group to set on the dropin file

  • mode (Stdlib::Filemode) (defaults to: '0444') —

    The mode to set on the dropin file

  • show_diff (Boolean) (defaults to: true) —

    Whether to show the diff when updating dropin file

  • notify_service (Boolean) (defaults to: false) —

    Notify a service for the unit, if it exists

  • daemon_reload (Boolean) (defaults to: true) —

    Call systemd::daemon_reload

  • unit_entry (Optional[Systemd::Unit::Unit]) (defaults to: undef) —

    key value pairs for [Unit] section of the unit file

  • slice_entry (Optional[Systemd::Unit::Slice]) (defaults to: undef) —

    key value pairs for [Slice] section of the unit file

  • service_entry (Optional[Systemd::Unit::Service]) (defaults to: undef) —

    key value pairs for [Service] section of the unit file

  • install_entry (Optional[Systemd::Unit::Install]) (defaults to: undef) —

    key value pairs for [Install] section of the unit file

  • timer_entry (Optional[Systemd::Unit::Timer]) (defaults to: undef) —

    key value pairs for [Timer] section of the unit file

  • path_entry (Optional[Systemd::Unit::Path]) (defaults to: undef) —

    key value pairs for [Path] section of the unit file

  • socket_entry (Optional[Systemd::Unit::Socket]) (defaults to: undef) —

    key value pairs for the [Socket] section of the unit file

  • mount_entry (Optional[Systemd::Unit::Mount]) (defaults to: undef) —

    key value pairs for the [Mount] section of the unit file

  • swap_entry (Optional[Systemd::Unit::Swap]) (defaults to: undef) —

    key value pairs for the [Swap] section of the unit file

See Also:

  • systemdsystemd.unit(5)


94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
 
# File 'manifests/manage_dropin.pp', line 94

define systemd::manage_dropin (
  Systemd::Unit                    $unit,
  Systemd::Dropin                  $filename                = $name,
  Enum['present', 'absent']        $ensure                  = 'present',
  Stdlib::Absolutepath             $path                    = '/etc/systemd/system',
  Boolean                          $selinux_ignore_defaults = false,
  String                           $owner                   = 'root',
  String                           $group                   = 'root',
  Stdlib::Filemode                 $mode                    = '0444',
  Boolean                          $show_diff               = true,
  Boolean                          $notify_service          = false,
  Boolean                          $daemon_reload           = true,
  Optional[Systemd::Unit::Install] $install_entry           = undef,
  Optional[Systemd::Unit::Unit]    $unit_entry              = undef,
  Optional[Systemd::Unit::Slice]   $slice_entry             = undef,
  Optional[Systemd::Unit::Service] $service_entry           = undef,
  Optional[Systemd::Unit::Timer]   $timer_entry             = undef,
  Optional[Systemd::Unit::Path]    $path_entry              = undef,
  Optional[Systemd::Unit::Socket]  $socket_entry            = undef,
  Optional[Systemd::Unit::Mount]   $mount_entry             = undef,
  Optional[Systemd::Unit::Swap]    $swap_entry              = undef,
) {
  if $timer_entry and $unit !~ Pattern['^[^/]+\.timer'] {
    fail("Systemd::Manage_dropin[${name}]: for unit ${unit} timer_entry is only valid for timer units")
  }

  if $path_entry and $unit !~ Pattern['^[^/]+\.path'] {
    fail("Systemd::Manage_dropin[${name}]: for unit ${unit} path_entry is only valid for path units")
  }

  if $socket_entry and $unit !~ Pattern['^[^/]+\.socket'] {
    fail("Systemd::Manage_dropin[${name}]: for unit ${unit} socket_entry is only valid for socket units")
  }

  if $slice_entry and $unit !~ Pattern['^[^/]+\.slice'] {
    fail("Systemd::Manage_dropin[${name}]: for unit ${unit} slice_entry is only valid for slice units")
  }

  if $mount_entry and $unit !~ Pattern['^[^/]+\.mount'] {
    fail("Systemd::Manage_dropin[${name}]: for unit ${unit} mount_entry is only valid for mount units")
  }

  if $swap_entry and $unit !~ Pattern['^[^/]+\.swap'] {
    fail("Systemd::Manage_dropin[${name}]: for unit ${unit} swap_entry is only valid for swap units")
  }

  systemd::dropin_file { $name:
    ensure                  => $ensure,
    filename                => $filename,
    unit                    => $unit,
    path                    => $path,
    selinux_ignore_defaults => $selinux_ignore_defaults,
    owner                   => $owner,
    group                   => $group,
    mode                    => $mode,
    show_diff               => $show_diff,
    notify_service          => $notify_service,
    daemon_reload           => $daemon_reload,
    content                 => epp('systemd/unit_file.epp', {
        'unit_entry'    => $unit_entry,
        'slice_entry'   => $slice_entry,
        'service_entry' => $service_entry,
        'install_entry' => $install_entry,
        'timer_entry'   => $timer_entry,
        'path_entry'    => $path_entry,
        'socket_entry'  => $socket_entry,
        'mount_entry'   => $mount_entry,
        'swap_entry'    => $swap_entry,
    }),
  }
}