From 63b4e44cbaf28196b00c61940f8e6e627b42c626 Mon Sep 17 00:00:00 2001
From: Tiago Gomes <tiago.gomes@codethink.co.uk>
Date: Wed, 1 Apr 2015 09:04:02 +0000
Subject: Configure Ironic

---
 strata/openstack-services/ironic.morph | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

(limited to 'strata')

diff --git a/strata/openstack-services/ironic.morph b/strata/openstack-services/ironic.morph
index 08964ce6..850399b4 100644
--- a/strata/openstack-services/ironic.morph
+++ b/strata/openstack-services/ironic.morph
@@ -1,3 +1,17 @@
 name: ironic
 kind: chunk
 build-system: python-distutils
+post-install-commands:
+# Install rootwrap.conf
+- install -D -m 640 etc/ironic/rootwrap.conf "$DESTDIR"/etc/ironic/rootwrap.conf
+# Move rootwrap files to a proper location
+- mkdir -p "$DESTDIR"/etc/ironic/rootwrap.d
+- install -m 644 etc/ironic/rootwrap.d/* "$DESTDIR"/etc/ironic/rootwrap.d/
+# Add ironic to sudoers controlling which commands will run as a root
+# using the openstack rootwrap.
+- |
+  install -D -m 0440 /proc/self/fd/0 <<'EOF' "$DESTDIR"/etc/sudoers.d/ironic-rootwrap
+  Defaults:ironic !requiretty
+
+  ironic ALL=(root) NOPASSWD: /usr/bin/ironic-rootwrap /etc/ironic/rootwrap.conf *
+  EOF
-- 
cgit v1.2.1