Root user account configuration module
released May 31st 2018
This version is compatible with:
- Puppet Enterprise 3.x
- Puppet >=2.7.20 <5.4.0
- Gentoo , , , ,
Start using this module
Add this module to your Puppetfile:
Learn more about managing modules with a Puppetfilemod 'thias-root', '1.0.1'
thias/root — version 1.0.1 May 31st 2018
This is a very simple module to configure the local root user account, typically to lock it down and keep it that way.
::root: Class to configure the local root user account.
Including the main class without specifying any parameters shouldn't change anything, since it will just ensure that the root account exists with its default attributes (uid 0, gid 0, /root home, 'root' name).
Main class parameters (all default to
undef unless otherwise specificed) :
$password: Account password hash.
$comment: Account passwd comment. Default : OS specific original value
$shell: Account passwd shell. Default : OS specific original value
$email_recipient: Email forward recipient.
From hiera, enforcing a specific password, denying
presence and forwarding local email to an external address :
--- classes: '::root' root::password: '$6$0V82Ibo2$TRTehe1A1d9WFl1a3e3qgEfXBotOZSZRn5egcyMtl1a3q/EkzWPClaIaXn5egcyMtL83ga.NpNAzO4dlaIaX51' root::ssh_authorized_keys_ensure: 'absent' root::email_recipient: 'firstname.lastname@example.org'
Note that you can use the following to disable password-based access to the account (typically when using only sudo) :
Copyright (C) 2013-2015 Matthias Saou Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.