include: - firewalld - profile.seccheck - profile.zypp - profile.node_exporter - users - .ssh - postfix.config {#- to-do: move this to some formula or macro -#} {%- set osfullname = grains['osfullname'] -%} {#- this SLES clause likely only works in BCI -#} {%- if osfullname == 'Leap' or osfullname == 'SLES' -%} {%- set repoos = grains['osrelease'] -%} {%- elif osfullname == 'openSUSE Tumbleweed' -%} {%- set repoos = 'openSUSE_Tumbleweed' -%} {%- else -%} {%- do salt.log.error('Unsupported operating system.') -%} {%- endif -%} {%- set repobase = 'https://download.opensuse.org/repositories/home:/crameleon:/LibertaCasa/' ~ repoos -%} {%- set repokey = repobase ~ '/repodata/repomd.xml.key' %} libertacasa_rpm_key: cmd.run: - name: rpm --import {{ repokey }} - unless: rpm -q --quiet gpg-pubkey-f8722274 libertacasa_rpm_repository: pkgrepo.managed: - name: 'LibertaCasa' - baseurl: {{ repobase }} - gpgcheck: 1 - gpgkey: {{ repokey }} - priority: 110 - require: - cmd: libertacasa_rpm_key ca-certificates-syscid: pkg.installed: - require: - pkgrepo: libertacasa_rpm_repository common_packages: pkg.installed: - names: - fish - system-group-wheel