Puppet Class: lsys::tools::diagnostic

Defined in:
manifests/tools/diagnostic.pp

Summary

System statistic/monitoring tools

Overview

System statistic/monitoring tools

Examples:

include lsys::tools::

Parameters:

  • enable_hardening (Boolean) (defaults to: false)
  • iotop_ensure (Bsys::PackageVersion) (defaults to: false)
  • lsof_ensure (Bsys::PackageVersion) (defaults to: false)
  • strace_ensure (Bsys::PackageVersion) (defaults to: false)
  • perf_ensure (Bsys::PackageVersion) (defaults to: false)
  • procps_ensure (Bsys::PackageVersion) (defaults to: false) 


15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
 
# File 'manifests/tools/diagnostic.pp', line 15

class lsys::tools::diagnostic (
  Boolean $enable_hardening = false,
  Bsys::PackageVersion $iotop_ensure = false,
  Bsys::PackageVersion $lsof_ensure = false,
  Bsys::PackageVersion $strace_ensure = false,
  Bsys::PackageVersion $perf_ensure = false,
  Bsys::PackageVersion $procps_ensure = false,
) {
  # Top like utility for I/O
  bsys::tools::package { 'iotop': ensure => $iotop_ensure }

  # A utility which lists open files on a Linux/UNIX system
  bsys::tools::package { 'lsof': ensure => $lsof_ensure }

  # Tracks and displays system calls associated with a running process
  bsys::tools::package { 'strace': ensure => $strace_ensure }

  # Performance monitoring for the Linux kernel
  bsys::tools::package { 'perf': ensure => $perf_ensure }

  # System and process monitoring utilities
  bsys::tools::package { 'procps-ng': ensure => $procps_ensure }

  if $enable_hardening {
    file {
      default: mode => 'o=';

      # procps-ng
      '/usr/bin/free': ;
      '/usr/bin/pgrep': ;
      '/usr/bin/pkill': ;
      '/usr/bin/pmap': ;
      '/usr/bin/ps': ;
      '/usr/bin/pwdx': ;
      '/usr/bin/skill': ;
      '/usr/bin/slabtop': ;
      '/usr/bin/snice': ;
      '/usr/bin/tload': ;
      '/usr/bin/top': ;
      '/usr/bin/uptime': ;
      '/usr/bin/vmstat': ;
      '/usr/bin/w': ;
      '/usr/bin/watch': ;
      '/usr/sbin/sysctl': ;

      # strace
      '/usr/bin/strace': ;
      '/usr/bin/strace-log-merge': ;

      # lsof
      '/usr/sbin/lsof': ;
    }
  }
}