Opened 6 months ago

Last modified 6 months ago

#33449 new task

puppet: replace dsa_systemd with camptocamp systemd module

Reported by: anarcat Owned by: tpa
Priority: Very Low Milestone:
Component: Internal Services/Tor Sysadmin Team Version:
Severity: Major Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:


we currently have two systemd module in Puppet, dsa_systemd (from the Debian sysadmins) and camptocamp-systemd, from the Puppet forge.

the latter was imported as a dependency of the Prometheus module and it would be very hard to remove it from our codebase.

we should look at whether we can replace the dsa_systemd module with the forge systemd module instead. this would allow us to collaborate with a broader community and remove duplicate code from our monorepo.

ideally, we'd also provide the good DSA folks a procedure on how to perform the migration, since we'll have to do it anyways.

so far, I've found this transition:

dsa_systemd::linger { 'bridgescan': }

... becomes:

loginctl_user { 'tordnsel':
    linger => enabled,

we also use:

  • dsa_systemd::override
  • dsa_systemd::mask

we already use the camptocamp:

  • systemd::tmpfile
  • systemd::unit_file

... and we have various systemd files manually deployed in /lib and /etc

Child Tickets

Change History (1)

comment:1 Changed 6 months ago by anarcat

Summary: replace dsa_systemd with camptocamp systemd modulepuppet: replace dsa_systemd with camptocamp systemd module
Note: See TracTickets for help on using tickets.