systemd (30) Versions 0.1.1 Follow17

chef cookbook for managing linux systems via systemd

Policyfile

Berkshelf

Knife

cookbook 'systemd', '= 0.1.1', :supermarket

cookbook 'systemd', '= 0.1.1'

knife supermarket install systemd

knife supermarket download systemd

README

Dependencies

Changelog

Quality 100%

systemd chef cookbook

A resource-driven Chef cookbook for systemd.

Currently considered alpha-quality; early adopters' feedback wanted!

See issues for a list of ways to contribute :)

Cookbook builds on a core systemd_unit resource in order to provide resources
for the following unit types: automount, device, mount, path, service, slice,
socket, swap, target, timer.

Recommended reading:
- This README!
- Overview of systemd for RHEL 7
- systemd docs
- Lennart's blog series
- libraries under libraries/*.rb
- test cookbooks under test/fixtures/cookbooks/setup

Recipes

In progress...

systemd::hostnamed

systemd::journal_gatewayd

systemd::journald

systemd::logind

systemd::machined

systemd::networkd

systemd::resolved

systemd::timedated

systemd::timesyncd

Resources

Foreword

Unit basics

Systemd units are files that describe a system resource, like a
socket, a device, a service, etc. They're written in INI format, an
easy and readable format for describing simple configurations.

Admin-generated configurations are stored under '/etc/systemd/system', and
override system-level units located under '/usr/lib/systemd/system'.

Every unit type supports at least a "Unit" and "Install" section. The "Unit"
section carries information about the unit itself, that does not vary between
unit types; attributes like "Requires", "Description", "Conflicts", or
assertions about the unit's expectations about its environment. The "Install"
section carries information about the unit installation, and is only used by
systemd when a unit is enabled or disabled; attributes like "Wants" or "Alias".

Almost every unit unit type (with a couple minor exceptions in device and
target), also support a configuration section based on their own "type". For
example, service units have service-specific configuration in the "Service"
section for configuration options like "ExecStart", and mount units have a
"Mount" section for options like "What", and "Where".

There are also 3 special groups of unit options that are common between several
types of units: exec, kill, and resource-control, which handle common options
re: execution environment configuration (e.g. "WorkingDirectory"), process
killing procedure configuration (e.g. "KillSignal"), and resource control
settings (e.g. "MemoryLimit"). Cookbook resources which support these common
attributes along with their type-specific attributes are explicitly noted in
the resource documentation below, and linked to the documentation for those
attributes.

A quick word about drop-ins

In systemd, there are 2 ways to override a vendor setting: copying the unit
from the vendor config location ('/usr/lib/systemd/system') to the local
configuration path ('/etc/systemd/system') in order to override the entire
unit configuration, or using a "drop-in" unit to override just the settings
one specifically wants while keeping track of your explicit requirements and
still support receiving vendor updates.

The unit resources in this cookbook support a "drop-in" mode for managing
drop-in units to override units of the same unit type. For more information,
see the drop-in common configuration attributes.

systemd_automount

Unit which describes a file system automount point controlled by systemd.
Documentation

Attribute	Description	Default
where	see docs	nil
directory_mode	see docs	nil
timeout_idle_sec	see docs	nil

Also supports:
- organization
- unit
- install
- drop-in

systemd_device

Unit which describes a device as exposed in the sysfs/udev device tree.
Documentation

This resource has no specific options.

Also supports:
- organization
- unit
- install
- drop-in

systemd_mount

Unit which describes a file system mount point controlled by systemd.
Documentation

Attribute	Description	Default
directory_mode	see docs	nil
kill_mode	see docs	nil
kill_signal	see docs	nil
options	see docs	nil
send_sighup	see docs	nil
send_sigkill	see docs	nil
sloppy_options	see docs	nil
timeout_sec	see docs	nil
type	see docs	nil
what	see docs	nil
where	see docs	nil

Also supports:
- organization
- unit
- install
- drop-in
- exec
- kill
- resource-control

systemd_path

Unit which describes information about a path monitored by systemd for
path-based activities.
Documentation

Attribute	Description	Default
directory_mode	see docs	nil
directory_not_empty	see docs	nil
make_directory	see docs	nil
path_changed	see docs	nil
path_exists	see docs	nil
path_exists_glob	see docs	nil
path_modified	see docs	nil
unit	see docs	nil

Also supports:
- organization
- unit
- install
- drop-in

systemd_service

Unit which describes information about a process controlled and supervised by systemd.
Documentation

Attribute	Description	Default
bus_name	see docs	nil
bus_policy	see docs	nil
exec_reload	see docs	nil
exec_start	see docs	nil
exec_start_post	see docs	nil
exec_start_pre	see docs	nil
exec_stop	see docs	nil
exec_stop_post	see docs	nil
failure_action	see docs	nil
file_descriptor_store_max	see docs	nil
guess_main_pid	see docs	nil
non_blocking	see docs	nil
notify_access	see docs	nil
permissions_start_only	see docs	nil
pid_file	see docs	nil
reboot_argument	see docs	nil
remain_after_exit	see docs	nil
restart	see docs	nil
restart_force_exit_status	see docs	nil
restart_prevent_exit_status	see docs	nil
restart_sec	see docs	nil
root_directory_start_only	see docs	nil
sockets	see docs	nil
start_limit_action	see docs	nil
start_limit_burst	see docs	nil
start_limit_interval	see docs	nil
success_exit_status	see docs	nil
timeout_sec	see docs	nil
timeout_start_sec	see docs	nil
timeout_stop_sec	see docs	nil
type	see docs	nil
watchdog_sec	see docs	nil

Also supports:
- organization
- unit
- install
- drop-in
- exec
- kill
- resource-control

systemd_slice

Unit which describes a "slice" of the system; useful for managing resources
for of a group of processes.
Documentation

This resource has no specific options.

Also supports:
- organization
- unit
- install
- drop-in
- resource-control

systemd_socket

Unit which describes an IPC, network socket, or file-system FIFO controlled
and supervised by systemd for socket-based service activation.
Documentation

Attribute	Description	Default
accept	see docs	nil
backlog	see docs	nil
bind_i_pv6_only	see docs	nil
bind_to_device	see docs	nil
broadcast	see docs	nil
defer_accept_sec	see docs	nil
directory_mode	see docs	nil
exec_start_post	see docs	nil
exec_start_pre	see docs	nil
exec_stop_post	see docs	nil
exec_stop_pre	see docs	nil
free_bind	see docs	nil
iptos	see docs	nil
ipttl	see docs	nil
keep_alive	see docs	nil
keep_alive_interval_sec	see docs	nil
keep_alive_probes	see docs	nil
keep_alive_time_sec	see docs	nil
listen_datagram	see docs	nil
listen_fifo	see docs	nil
listen_message_queue	see docs	nil
listen_netlink	see docs	nil
listen_sequential_packet	see docs	nil
listen_special	see docs	nil
listen_stream	see docs	nil
mark	see docs	nil
max_connections	see docs	nil
message_queue_max_messages	see docs	nil
message_queue_message_size	see docs	nil
no_delay	see docs	nil
pass_credentials	see docs	nil
pass_security	see docs	nil
pipe_size	see docs	nil
priority	see docs	nil
receive_buffer	see docs	nil
remove_on_stop	see docs	nil
reuse_port	see docs	nil
se_linux_context_from_net	see docs	nil
send_buffer	see docs	nil
service	see docs	nil
smack_label	see docs	nil
smack_label_ip_in	see docs	nil
smack_label_ip_out	see docs	nil
socket_group	see docs	nil
socket_mode	see docs	nil
socket_user	see docs	nil
symlinks	see docs	nil
tcp_congestion	see docs	nil
timeout_sec	see docs	nil
transparent	see docs	nil

Also supports:
- organization
- unit
- install
- drop-in
- exec
- kill
- resource-control

systemd_swap

Unit which describes a swap device or file for memory paging.
Documentation

Attribute	Description	Default
options	see docs	nil
priority	see docs	nil
timeout_sec	see docs	nil
what	see docs	nil

Also supports:
- organization
- unit
- install
- drop-in
- exec
- kill
- resource-control

systemd_target

Unit which describes a systemd target, used for grouping units and
synchronization points during system start-up.
Documentation

This unit has no specific options.

Also supports:
- organization
- unit
- install
- drop-in

systemd_timer

Unit which describes a timer managed by systemd, for timer-based unit
activation (typically a service of the same name).
Documentation

Attribute	Description	Default
accuracy_sec	see docs	nil
on_active_sec	see docs	nil
on_boot_sec	see docs	nil
on_calendar	see docs	nil
on_startup_sec	see docs	nil
on_unit_active_sec	see docs	nil
on_unit_inactive_sec	see docs	nil
persistent	see docs	nil
unit	see docs	nil
wake_system	see docs	nil

Also supports:
- organization
- unit
- install
- drop-in

Common Attributes

organization

special no-op attributes that yield to a block for the purpose of being
able to group attributes of a resource similar to their rendered grouping.

Attribute	Description	Default
install	no-op block yielder	nil
$unit_type	no-op block yielder	nil

By way of explanation:

systemd_automount 'vagrant-home' do
  description 'Test Automount'
  install do
    wanted_by 'local-fs.target'
  end
  automount do
    where '/home/vagrant'
  end
end

unit

Common configuration options of all the unit types.
Documentation

Attribute	Description	Default
after	see docs	nil
allow_isolate	see docs	nil
assert_ac_power	see docs	nil
assert_architecture	see docs	nil
assert_capability	see docs	nil
assert_directory_not_empty	see docs	nil
assert_file_is_executable	see docs	nil
assert_file_not_empty	see docs	nil
assert_first_boot	see docs	nil
assert_host	see docs	nil
assert_kernel_command_line	see docs	nil
assert_needs_update	see docs	nil
assert_path_exists	see docs	nil
assert_path_exists_glob	see docs	nil
assert_path_is_directory	see docs	nil
assert_path_is_mount_point	see docs	nil
assert_path_is_read_write	see docs	nil
assert_path_is_symbolic_link	see docs	nil
assert_security	see docs	nil
assert_virtualization	see docs	nil
before	see docs	nil
binds_to	see docs	nil
condition_ac_power	see docs	nil
condition_architecture	see docs	nil
condition_capability	see docs	nil
condition_directory_not_empty	see docs	nil
condition_file_is_executable	see docs	nil
condition_file_not_empty	see docs	nil
condition_first_boot	see docs	nil
condition_host	see docs	nil
condition_kernel_command_line	see docs	nil
condition_needs_update	see docs	nil
condition_path_exists	see docs	nil
condition_path_exists_glob	see docs	nil
condition_path_is_directory	see docs	nil
condition_path_is_mount_point	see docs	nil
condition_path_is_read_write	see docs	nil
condition_path_is_symbolic_link	see docs	nil
condition_security	see docs	nil
condition_virtualization	see docs	nil
conflicts	see docs	nil
default_dependencies	see docs	nil
description	see docs	nil
documentation	see docs	nil
ignore_on_isolate	see docs	nil
ignore_on_snapshot	see docs	nil
job_timeout_action	see docs	nil
job_timeout_reboot_argument	see docs	nil
job_timeout_sec	see docs	nil
joins_namespace_of	see docs	nil
on_failure	see docs	nil
on_failure_job_mode	see docs	nil
part_of	see docs	nil
propagates_reload_to	see docs	nil
refuse_manual_start	see docs	nil
refuse_manual_stop	see docs	nil
reload_propagated_from	see docs	nil
requires	see docs	nil
requires_mounts_for	see docs	nil
requires_overridable	see docs	nil
requisite	see docs	nil
requisite_overridable	see docs	nil
source_path	see docs	nil
stop_when_unneeded	see docs	nil
wants	see docs	nil

install

Carries installation information for units. Used exclusively by
enable/disable commands of systemctl. Documentation

Attribute	Description	Default
aliases	array of aliases	[]
also	see docs	nil
default_instance	see docs	nil
required_by	see docs	nil
wanted_by	see docs	nil

drop-in

Cookbook-specific attributes that activate and control drop-in mode for units.

Attribute	Description	Default
drop_in	boolean which sets where resource is a drop-in unit	false
override	which unit to override, prefix only. suffix determined by resource unit type (e.g. "ssh" on a systemd_service -> "ssh.service.d")	nil
overrides	drop-in unit options that require a reset (e.g. "ExecStart" -> "ExecStart=" at top of section)	[]

kill

Process killing procedure configuration. Documentation

Attribute	Description	Default
kill_mode	see docs	nil
kill_signal	see docs	nil
send_sighup	see docs	nil
send_sigkill	see docs	nil

exec

Execution environment configuration. Documentation

Attribute	Description	Default
app_armor_profile	see docs	nil
capabilities	see docs	nil
capability_bounding_set	see docs	nil
cpu_affinity	see docs	nil
cpu_scheduling_policy	see docs	nil
cpu_scheduling_priority	see docs	nil
cpu_scheduling_reset_on_fork	see docs	nil
environment	see docs	nil
environment_file	see docs	nil
group	see docs	nil
ignore_sigpipe	see docs	nil
inaccessible_directories	see docs	nil
io_scheduling_class	see docs	nil
io_scheduling_priority	see docs	nil
limit_as	see docs	nil
limit_core	see docs	nil
limit_cpu	see docs	nil
limit_data	see docs	nil
limit_fsize	see docs	nil
limit_locks	see docs	nil
limit_memlock	see docs	nil
limit_msgqueue	see docs	nil
limit_nice	see docs	nil
limit_nofile	see docs	nil
limit_nproc	see docs	nil
limit_rss	see docs	nil
limit_rtprio	see docs	nil
limit_rttime	see docs	nil
limit_sigpending	see docs	nil
limit_stack	see docs	nil
mount_flags	see docs	nil
nice	see docs	nil
no_new_privileges	see docs	nil
oom_score_adjust	see docs	nil
pam_name	see docs	nil
personality	see docs	nil
private_devices	see docs	nil
private_network	see docs	nil
private_tmp	see docs	nil
protect_home	see docs	nil
protect_system	see docs	nil
read_only_directories	see docs	nil
read_write_directories	see docs	nil
restrict_address_families	see docs	nil
root_directory	see docs	nil
runtime_directory	see docs	nil
runtime_directory_mode	see docs	nil
se_linux_context	see docs	nil
secure_bits	see docs	nil
smack_process_label	see docs	nil
standard_error	see docs	nil
standard_input	see docs	nil
standard_output	see docs	nil
supplementary_groups	see docs	nil
syslog_facility	see docs	nil
syslog_identifier	see docs	nil
syslog_level	see docs	nil
syslog_level_prefix	see docs	nil
system_call_architectures	see docs	nil
system_call_error_number	see docs	nil
system_call_filter	see docs	nil
timer_slack_n_sec	see docs	nil
tty_path	see docs	nil
tty_reset	see docs	nil
ttyv_hangup	see docs	nil
ttyvt_disallocate	see docs	nil
u_mask	see docs	nil
user	see docs	nil
utmp_identifier	see docs	nil
working_directory	see docs	nil

resource-control

Resource control unit settings. Documentation

Attribute	Description	Default
block_io_accounting	see docs	nil
block_io_device_weight	see docs	nil
block_io_read_bandwidth	see docs	nil
block_io_weight	see docs	nil
block_io_write_bandwidth	see docs	nil
cpu_accounting	see docs	nil
cpu_quota	see docs	nil
cpu_shares	see docs	nil
delegate	see docs	nil
device_allow	see docs	nil
device_policy	see docs	nil
memory_accounting	see docs	nil
memory_limit	see docs	nil
slice	see docs	nil
startup_block_io_weight	see docs	nil
startup_cpu_shares	see docs	nil

Dependent cookbooks

This cookbook has no specified dependencies.

Contingent cookbooks

# 0.1.1 / 2015-07-10 * initial release

Foodcritic Metric

0.1.1 passed this metric

Adoptable Cookbooks List

Supermarket Belongs to the Community

View our collection of guides, documentation, and articles

Select Badges

Select Supported Platforms

Select Status

systemd (30) Versions 0.1.1 3.2.5 3.2.4 3.2.3 3.2.2 3.2.1 3.2.0 3.1.6 3.1.5 3.1.4 3.1.3 3.1.2 3.1.1 3.1.0 3.0.2 3.0.1 3.0.0 2.1.3 2.1.2 2.1.1 2.0.0 1.2.0 1.1.2 1.1.1 1.1.0 1.0.0 0.4.0 0.3.0 0.2.0 0.1.1 0.1.0 Follow17

systemd chef cookbook

Recipes

systemd::hostnamed

systemd::journal_gatewayd

systemd::journald

systemd::logind

systemd::machined

systemd::networkd

systemd::resolved

systemd::timedated

systemd::timesyncd

Resources

Foreword

Unit basics

A quick word about drop-ins

systemd_automount

systemd_device

systemd_mount

systemd_path

systemd_service

systemd_slice

systemd_socket

systemd_swap

systemd_target

systemd_timer

Common Attributes

organization

unit

install

drop-in

kill

exec

resource-control

Dependent cookbooks

Contingent cookbooks

Foodcritic Metric 0.1.1 passed this metric

Details

Updated July 11, 2015 Created on February 26, 2013

Supported Platforms

License

systemd (30) Versions 0.1.1 Follow17

Foodcritic Metric

0.1.1 passed this metric