~clint-fewbar/pyjuju/add-egress-zookeeper-protection

« back to all changes in this revision

Viewing changes to juju/providers/orchestra/tests/data/launch_user_data

  • Committer: Clint Byrum
  • Date: 2012-09-21 16:00:46 UTC
  • Revision ID: clint@fewbar.com-20120921160046-okimnbv5ehruqms2
fix orchestra launch tests

Show diffs side-by-side

added added

removed removed

Lines of Context:
4
4
  machine-id: '42'}
5
5
output: {all: '| tee -a /var/log/cloud-init-output.log'}
6
6
packages: [bzr, byobu, tmux, python-setuptools, python-twisted, python-txaws, python-zookeeper, juju]
7
 
runcmd: [sudo mkdir -p /var/lib/juju, sudo mkdir -p
8
 
    /var/log/juju, 'cat >> /etc/init/juju-machine-agent.conf <<EOF
9
 
 
10
 
    description "Juju machine agent"
11
 
 
12
 
    author "Juju Team <juju@lists.ubuntu.com>"
13
 
 
14
 
 
15
 
    start on runlevel [2345]
16
 
 
17
 
    stop on runlevel [!2345]
18
 
 
19
 
    respawn
20
 
 
21
 
 
22
 
    env JUJU_MACHINE_ID="42"
23
 
 
24
 
    env JUJU_ZOOKEEPER="jennifer:2181"
25
 
 
26
 
 
27
 
    exec python -m juju.agents.machine --nodaemon --logfile /var/log/juju/machine-agent.log
28
 
    --session-file /var/run/juju/machine-agent.zksession >> /tmp/juju-machine-agent.output
29
 
    2>&1
30
 
 
31
 
    EOF
32
 
 
33
 
    ', /sbin/start juju-machine-agent]
 
7
runcmd: 
 
8
       - sudo mkdir -p /var/lib/juju
 
9
       - sudo mkdir -p /var/log/juju
 
10
       - |
 
11
            cat >> /etc/init/juju-machine-agent.conf <<EOF
 
12
            description "Juju machine agent"
 
13
            author "Juju Team <juju@lists.ubuntu.com>"
 
14
 
 
15
            start on runlevel [2345]
 
16
            stop on runlevel [!2345]
 
17
            respawn
 
18
 
 
19
            env JUJU_MACHINE_ID="42"
 
20
            env JUJU_ZOOKEEPER="jennifer:2181"
 
21
 
 
22
            pre-start script
 
23
                # Protects ZooKeeper from access by non-root users.
 
24
                if iptables -C OUTPUT -p tcp --dport 2181 -j juju-protect-zookeepers ; then
 
25
                    iptables -D OUTPUT -p tcp --dport 2181 -j juju-protect-zookeepers
 
26
                fi
 
27
                iptables -F juju-protect-zookeepers
 
28
                iptables -X juju-protect-zookeepers
 
29
                iptables -N juju-protect-zookeepers
 
30
                iptables -I OUTPUT -p tcp --dport 2181 -j juju-protect-zookeepers
 
31
                iptables -A juju-protect-zookeepers -d jennifer -m owner \! --uid-owner 0 -j DROP
 
32
            end script
 
33
 
 
34
            exec python -m juju.agents.machine --nodaemon --logfile /var/log/juju/machine-agent.log --session-file /var/run/juju/machine-agent.zksession >> /tmp/juju-machine-agent.output 2>&1
 
35
            EOF
 
36
       - /sbin/start juju-machine-agent
34
37
ssh_authorized_keys: [this-is-a-public-key]