(See runtime config for an introduction to addons.)
Need: Configure syslog on all machines to forward system logs to a remote location.
releases: - name: syslog version: 3 addons: - name: logs jobs: - name: syslog_forwarder release: syslog properties: syslog: address: logs4.papertrail.com transport: tcp port: 38559 tls_enabled: true permitted_peer: "*.papertrail.com" ca_cert: | -----BEGIN CERTIFICATE----- MIIClTCCAf4CCQDc6hJtvGB8RjANBgkqhkiG9w0BAQUFADCBjjELMAk... -----END CERTIFICATE-----
See syslog_forwarder job.
Custom SSH login banner¶
This job work with 3232+ stemcell series due to how sshd is configured.
Need: Configure custom login banner to comply with organizational regulations.
releases: - name: os-conf version: 3 addons: - name: misc jobs: - name: login_banner release: os-conf properties: login_banner: text: | This computer system is for authorized use only. All activity is logged and regularly checked by system administrators. Individuals attempting to connect to, port-scan, deface, hack, or otherwise interfere with any services on this system will be reported.
See login_banner job.
Custom SSH users¶
This job does not remove users from the VM when user is removed from the manifest.
Need: Provide SSH access to all VMs for a third party automation system.
releases: - name: os-conf version: 3 addons: - name: misc jobs: - name: user_add release: os-conf properties: users: - name: nessus public_key: "ssh-rsa AAAAB3NzaC1yc2EAQCyKb5nLZv...oYPkLlOGyAFLk6Id75Xr hostname" - name: teleport public_key: "ssh-rsa AAAAB3NzaC1yc2dfgJKkb5nLZv...dkjfLlOGyAFLk6kfbgYG hostname"
See user_add job.