Политика монтирования шары

[Костюков Владимир]

{% set node = salt['grains.get']('nodename') %}
{% set gpo_name = 'rbta_ldap_custom_gp_host_pam_mount' %}
{% set gpo = salt['pillar.get']('aldpro-hosts:' + node + ':' + gpo_name) %}
{% if gpo %}
install_packages:
  pkg.installed:
    - pkgs:
      - cifs-utils
      - libpam-mount
/etc/security/pam_mount.conf.xml:
  file.managed:
    - makedirs: True
    - contents: |
        <pam_mount>
            <debug enable="0" />
            <cifsmount>mount.cifs //%(SERVER)/%(VOLUME) %(MNTPT) -o %(OPTIONS) </cifsmount>
{%- for args in gpo %}
{%- set server = args.get('server') %}
{%- set resource = args.get('resource') %}
            <volume
                fstype="cifs"
                server="{{ server }}"
                path="{{ resource }}"
                mountpoint="/mnt/%(DOMAIN_USER)/{{ resource }}"
                uid="1402000000-2000000000"
                options="user=%(DOMAIN_USER),cruid=%(DOMAIN_USER),sec=krb5i,file_mode=0666,dir_mode=0777"
            />
{%- endfor %}
            <mntoptions allow="nosuid,nodev,loop,encryption,fsck,nonempty,allow_root,allow_other" />
            <mntoptions require="nosuid,nodev" />
            <logout wait="50000" hup="1" term="1" kill="1" />
            <mkmountpoint enable="1" remove="true" />
        </pam_mount>
{% endif %}

Уникальный идентификатор pam_mount
uid="1402000000-2000000000" Заменить на свои

{% if user is not defined %}
  {% set user = salt['pillar.get']("user") %}
{% endif %}
{% if salt['pillar.get']('aldpro-users:'+ user) is defined %}
  {% set homedir = salt['user.info'](user).home %}
  {% set gpo_name = 'rbta_ldap_custom_gp_user_shares_to_desktop' %}
  {% set gpo = salt['pillar.get']('aldpro-users:'+ user +':'+ gpo_name) %}
  {% if gpo %}
    {% set listres = [] %}
    {% set name = gpo.get('name') %}
    {% set name_ru = gpo.get('name_ru') %}
{{ homedir }}/Desktops/Desktop1/{{ name }}:
  file.directory:
    - user: {{ user }}
{{ homedir }}/Desktops/Desktop1/{{ name }}/.directory:
  file.managed:
    - user: {{ user }}
    - mode: 644
    - makedirs: True
    - contents: |
        [Desktop Entry]
        Name={{ name }}
        Name[ru]={{ name_ru }}
        Type=Directory
        Icon=network-local
    {% set dirs = salt['file.find']("/mnt/"+ user, type='d', mindepth=1, maxdepth=1) %}
    {% if dirs %}
      {% for dir in dirs %}
        {% set dirname = salt['file.basename'](dir) %}
      {% if dirname not in listres %}
        {% set listres = listres.append(dirname) %}
      {% endif %}
{{ homedir }}/Desktops/Desktop1/{{ name }}/{{ dirname }}:
  file.symlink:
    - target: {{ dir }}
      {% endfor %}
    {% endif %}
    {% set listfiles = salt['file.find'](homedir +'/Desktops/Desktop1/'+ name, mindepth=1, maxdepth=1) %}
    {% for file in listfiles %}
      {% if salt['file.basename'](file) not in listres %}
        {% if salt['file.basename'](file) != '.directory'%}
remove_{{ file }}:
  cmd.run:
    - name: rm -r "{{ file }}"
        {% endif %}
      {% endif %}
    {% endfor %}
  {% endif %}
{% endif %}

Уникальный идентификатор shares_to_desktop