From 3a2f641e4e70e76ffa77629c6208970c1a7af667 Mon Sep 17 00:00:00 2001
From: Paul Sherwood <paul.sherwood@codethink.co.uk>
Date: Fri, 25 Sep 2015 08:47:49 +0000
Subject: Proposed re-org of definitions repo

---
 baserock/strata/openstack-services/neutron.morph | 27 ++++++++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 baserock/strata/openstack-services/neutron.morph

(limited to 'baserock/strata/openstack-services/neutron.morph')

diff --git a/baserock/strata/openstack-services/neutron.morph b/baserock/strata/openstack-services/neutron.morph
new file mode 100644
index 00000000..6e203922
--- /dev/null
+++ b/baserock/strata/openstack-services/neutron.morph
@@ -0,0 +1,27 @@
+name: neutron
+kind: chunk
+build-system: python-distutils
+post-install-commands:
+- |
+  # Move the configuration files to a proper location
+  mkdir "$DESTDIR"/etc
+  mv "$DESTDIR/$PREFIX"/etc/neutron "$DESTDIR"/etc
+
+  # Remove unused start/stop script
+  rm "$DESTDIR/$PREFIX"/etc/init.d/neutron-server
+
+  # Remove configuration files which will be added by Ansible
+  rm "$DESTDIR"/etc/neutron/neutron.conf
+  rm "$DESTDIR"/etc/neutron/metadata_agent.ini
+  rm "$DESTDIR"/etc/neutron/plugins/ml2/ml2_conf.ini
+  rm "$DESTDIR"/etc/neutron/dhcp_agent.ini
+  rm "$DESTDIR"/etc/neutron/l3_agent.ini
+
+  # Add neutron to sudoers controlling which commands is running as a
+  # root using the openstack rootwrap.
+  mkdir -p "$DESTDIR"/etc/sudoers.d
+  install -D -m 0440 /proc/self/fd/0 <<'EOF' "$DESTDIR"/etc/sudoers.d/neutron-rootwrap
+  Defaults:neutron !requiretty
+
+  neutron ALL=(root) NOPASSWD: /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf *
+  EOF
-- 
cgit v1.2.1