9e4685a743
It sets up 389 Directory Server, including a TLS cert acquired using Let's Encrypt in production (that requires ldap.kosmos.org pointing to the server's IP)
64 lines
2.7 KiB
Ruby
64 lines
2.7 KiB
Ruby
require 'chef/resource'
|
|
|
|
class Chef
|
|
class Resource
|
|
class UlimitUser < Chef::Resource
|
|
resource_name :user_ulimit
|
|
|
|
property :username, String, name_property: true
|
|
property :filename, String, default: lazy { |r| r.username == '*' ? '00_all_limits' : "#{r.username}_limits" }
|
|
property :filehandle_limit, [String, Integer]
|
|
property :filehandle_soft_limit, [String, Integer]
|
|
property :filehandle_hard_limit, [String, Integer]
|
|
property :process_limit, [String, Integer]
|
|
property :process_soft_limit, [String, Integer]
|
|
property :process_hard_limit, [String, Integer]
|
|
property :memory_limit, [String, Integer]
|
|
property :core_limit, [String, Integer]
|
|
property :core_soft_limit, [String, Integer]
|
|
property :core_hard_limit, [String, Integer]
|
|
property :stack_limit, [String, Integer]
|
|
property :stack_soft_limit, [String, Integer]
|
|
property :stack_hard_limit, [String, Integer]
|
|
property :rtprio_limit, [String, Integer]
|
|
property :rtprio_soft_limit, [String, Integer]
|
|
property :rtprio_hard_limit, [String, Integer]
|
|
|
|
action :create do
|
|
new_resource.filename = "#{new_resource.filename}.conf" unless new_resource.filename.include?('.conf')
|
|
template "/etc/security/limits.d/#{new_resource.filename}" do
|
|
source 'ulimit.erb'
|
|
cookbook 'ulimit'
|
|
mode '0644'
|
|
variables(
|
|
ulimit_user: new_resource.username,
|
|
filehandle_limit: new_resource.filehandle_limit,
|
|
filehandle_soft_limit: new_resource.filehandle_soft_limit,
|
|
filehandle_hard_limit: new_resource.filehandle_hard_limit,
|
|
process_limit: new_resource.process_limit,
|
|
process_soft_limit: new_resource.process_soft_limit,
|
|
process_hard_limit: new_resource.process_hard_limit,
|
|
memory_limit: new_resource.memory_limit,
|
|
core_limit: new_resource.core_limit,
|
|
core_soft_limit: new_resource.core_soft_limit,
|
|
core_hard_limit: new_resource.core_hard_limit,
|
|
stack_limit: new_resource.stack_limit,
|
|
stack_soft_limit: new_resource.stack_soft_limit,
|
|
stack_hard_limit: new_resource.stack_hard_limit,
|
|
rtprio_limit: new_resource.rtprio_limit,
|
|
rtprio_soft_limit: new_resource.rtprio_soft_limit,
|
|
rtprio_hard_limit: new_resource.rtprio_hard_limit
|
|
)
|
|
end
|
|
end
|
|
|
|
action :delete do
|
|
new_resource.filename = "#{new_resource.filename}.conf" unless new_resource.filename.include?('.conf')
|
|
file "/etc/security/limits.d/#{new_resource.filename}" do
|
|
action :delete
|
|
end
|
|
end
|
|
end
|
|
end
|
|
end
|