Puppet Class: threatstack::yum

Inherits:
::threatstack::params
Defined in:
manifests/yum.pp

Overview

Class: threatstack::yum

Setup Threat Stack YUM repo.

Examples

This class is not meant to be directly realized outside of Class.

Authors

Pete Cheslock <pete.cheslock@threatstack.com> Tom McLaughlin <tom.mclaughlin@threatstack.com> Nate St. Germain <nate.stgermain@threatstack.com>

Copyright 2020 Threat Stack, Inc.



20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
 
# File 'manifests/yum.pp', line 20

class threatstack::yum inherits ::threatstack::params {
  Exec {
    path => ['/bin', '/usr/bin']
  }

  # Handle setups where wget is defined but with different attributes. This
  # should be fixed sometime in 4.15.x or 4.16.x of stdlib.  Fix is in master
  # but not released.
  if !defined(Package['wget']) {
    # Our site only supports TLS > 1.0 which curl, used by yum, does not support
    # in RHEL 6.  We use wget because even better, the --tlsv1 flag to curl does
    # not work before 6.7.
    ensure_packages('wget')
  }

  exec { 'ts-gpg-fetch':
    command => "wget ${::threatstack::gpg_key} -O ${::threatstack::gpg_key_file}",
    creates => $::threatstack::gpg_key_file
  }

  yumrepo { 'threatstack':
    descr    => 'Threat Stack Package Repository',
    enabled  => 1,
    baseurl  => $::threatstack::repo_url,
    gpgcheck => 1,
    gpgkey   => $::threatstack::gpg_key_file_uri,
    require  => Exec['ts-gpg-fetch']
  }
}