diff --git a/manifests/aes_sw.pp b/manifests/aes_sw.pp index 129d44610874cf03c5096f9e35f25fc51869a61c..e16a4173c5cdf0913ec1f027e9dab807e5c82b6b 100644 --- a/manifests/aes_sw.pp +++ b/manifests/aes_sw.pp @@ -87,17 +87,19 @@ class aes::aes_sw { group => $examadm_group, } + # Push TAL-calendar file to UPP-server (replaces old pull solution) # lint:ignore:140chars - file { "${examadm_home}/.ssh/authorized_keys": + file { '/etc/cron.daily/tal-access' : ensure => file, - mode => '0600', - owner => $examadm_user, - group => $examadm_group, - # lint:ignore:strict_indent heredoc failing... - content => @(SSHPUBKEY), - command="/home/examadm/tal-cli/source/scripts/tal-export.py --format ics --lookback 90 --lookahead 180",no-pty,no-user-rc,no-port-forwarding,no-agent-forwarding,no-X11-forwarding ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJW4LP0av20r7lPXNgsftF9oaAXK41AvHyuHwybciZC/QBfTcmYif83563cTg0OzR/p+OSobiDM0odaaFYtP/8xbuVRz87X5bGYm2m8yHHqPxobHkT5g/faMkl9Fef+Al4EsT5tiaYMOhG2lj8XRYuwAb7qjoz3FFbs8TEPE7Sv+4BUCCH94taCuNYLXSxN1EXvw7VW6Ld5QXRFP53l2QUeTqE9oSii3BVrXlqqrLvNV/7nwdwyse4uhff4QrM9o4oc9FaQr8PLlPGxdlbSfIQJMVzHGpeDu0WLw+NqtLO1hsdlvQm7GrT/v8N7GJNKlsvhwnwUuMhTrB0yPMbbub1 klaar36@upp - command="/home/examadm/tal-cli/source/scripts/tal-export.py --written --format ics --lookback 90 --lookahead 180",no-pty,no-user-rc,no-port-forwarding,no-agent-forwarding,no-X11-forwarding ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILZ8aEAXw0tRcYrk1aqldepuC6tmdUYZuM270QdDF79o tal written exams to ics - | SSHPUBKEY + owner => 'root', + group => 'root', + mode => '0700', + # lint:ignore:strict_indent + content => @(END), + #!/bin/bash + sudo -u examadm /home/examadm/tal-cli/source/scripts/tal-export.py --format ics --lookback 90 --lookahead 180 | sudo -u klaar36 ssh upp.ida.liu.se "cat >| /projects/upp/www/tal/tal-${environment}.ics" + sudo -u examadm /home/examadm/tal-cli/source/scripts/tal-export.py --written --format ics --lookback 90 --lookahead 180 | sudo -u klaar36 ssh upp.ida.liu.se "cat >| /projects/upp/www/tal/tal_written-${environment}.ics" + | END # lint:endignore:strict_indent } # lint:endignore:140chars diff --git a/scripts/eyaml_encrypt.sh b/scripts/eyaml_encrypt.sh index 69235037f4b7ac6bb611a8bea6c3a5392b8f4675..3de8384adeba15afe043e5e480c0c7b4f6853fa9 100644 --- a/scripts/eyaml_encrypt.sh +++ b/scripts/eyaml_encrypt.sh @@ -1,3 +1,5 @@ #! /bin/sh -eu +# Either pass -s <string> for a string, or -f <file> for a file. + exec eyaml encrypt --pkcs7-public-key "puppet_public_key.pkcs7.pem" "$@"