Curl in a salt state

[Scott King]

I'm trying to create a salt state for beyondtrust AD authentication tool. 

This is what I have so far, and it is saying that i have an unknown yaml render error.  on line 5. (underlined)

beyondtrust:

  cmd.run

  {% if grains['os'] == 'Ubuntu' %}

     - run

     - name: curl -L http://download.beyondtrust.com/PBISO/8.3/pbis-open-8.3.0.3287.linux.x86_64.deb.sh | -o -pbis.sh

  {% elif grains['os'] == 'RedHat' %}

    - name: curl http://download.beyondtrust.com/PBISO/8.3/pbis-open-8.3.0.3287.linux.x86_64.rpm.sh -o -pbis.sh

  {% endif %}

    - require

      - pkg: curl

Any help would be nice to get a salt state for beyondtrust

thanks.

[Clint Dilks]

Hi,

On Tue, Apr 26, 2016 at 6:45 AM, Scott King <scott...@gmail.com> wrote:

I'm trying to create a salt state for beyondtrust AD authentication tool. 

This is what I have so far, and it is saying that i have an unknown yaml render error.  on line 5. (underlined)

beyondtrust:

  cmd.run

  {% if grains['os'] == 'Ubuntu' %}

     - run

     - name: curl -L http://download.beyondtrust.com/PBISO/8.3/pbis-open-8.3.0.3287.linux.x86_64.deb.sh | -o -pbis.sh

Just from looking at this visually the pipe in this command seems out of place :)

[Wes Novack]

You're missing a colon after cmd.run and you need to delete the extra call to "- run" in the first if block.

[Scott King]

thanks Wes. life saver. 

[Christian Joergensen]

Hi,

Curl seems a bit overkill. Why not just use file.managed? The source argument supports http(s) URLs :)

Then you could also have the file checksummed (source_hash).

Cheers,

Christian

[Xandrellas]

In the interest of sharing information:

We use for Centos/Redhat:

pbis-open:

  pkgrepo.managed:

    - name: pbis-open

    - humanname: PBISO- local packages for $basearch

    - baseurl: http://repo.pbis.beyondtrust.com/yum/pbiso/$basearch

    - enabled: 1

    - gpgcheck: 0

    - order: 1

    - refresh_db: True

  pkg.installed:

    - name: pbis-open

    - require:

      - pkgrepo: pbis-open

and for Ubuntu we use:

pbis-open:

  pkgrepo.managed:

    - humanname: PBISO- local packages for $basearch

    - name: deb http://repo.pbis.beyondtrust.com/apt pbiso main

    - file: /etc/apt/sources.list.d/pbiso.list

    - key_url: http://repo.pbis.beyondtrust.com/yum/RPM-GPG-KEY-pbis

    - require_in:

      - pkg: pbis-open

  pkg.latest:

    - name: pbis-open

    - refresh: True

Works like a beast

On Monday, April 25, 2016 at 11:45:30 AM UTC-7, Scott King wrote:

[Scott King]

does the $basesearch variable come from a pillar file? Do you configure any specific accounts to be added as sudoers to your boxes? 

Thank

[Xandrellas]

Sorry I totally missed this and assumably you figured it out or went a different route, but:

that string is correct as is, it will get sniffed out regardless of pillar (and no doesn't come from pillar).

We use a separate sudoers formula to handle sudo level access.