init

.gitignore

@@ -0,0 +1 @@
+/data

data_example/salt/roots/pillar/empty.sls

@@ -0,0 +1,2 @@
+empty:
+  is_empty: True

data_example/salt/roots/pillar/top.sls

@@ -0,0 +1,3 @@
+base:
+  '*':
+    - empty

data_example/salt/roots/states/empty.sls

@@ -0,0 +1,3 @@
+empty:
+  cmd.run:
+    - name: "echo Empty state"

data_example/salt/roots/states/top.sls

@@ -0,0 +1,3 @@
+base:
+  '*':
+    - empty

docker-compose.yml

@@ -0,0 +1,22 @@
+version: '3.7'
+
+services:
+    salt:
+        build: ./salt
+        container_name: salt-salt
+#        restart: unless-stopped
+        networks:
+            salt.internal.docker:
+                aliases:
+                    - salt.salt.internal.docker
+        ports:
+            - "0.0.0.0:4505:4505"
+            - "0.0.0.0:4506:4506"
+        volumes:
+            - ./data/salt/roots/:/data/salt/
+            - ./data/salt/pki/:/etc/salt/pki/
+        env_file:
+            - env
+
+networks:
+    salt.internal.docker:

env

@@ -0,0 +1,4 @@
+SSMTP_ROOT=root@rthoni.com
+SSMTP_MAILHUB=172.17.0.1:10025
+SSMTP_MAILDOMAIN=rthoni.com
+

salt/Dockerfile

@@ -0,0 +1,25 @@
+FROM debian:stretch
+
+ARG CONFIG_DIR=/etc/default/config-files/
+
+RUN apt-get update &&\
+    apt-get install -y wget gnupg2 &&\
+    wget -O - https://repo.saltstack.com/py3/debian/9/amd64/latest/SALTSTACK-GPG-KEY.pub | apt-key add - &&\
+    echo 'deb http://repo.saltstack.com/py3/debian/9/amd64/latest stretch main' > /etc/apt/sources.list.d/saltstack.list &&\
+    apt-get update &&\
+    apt-get install -y ssmtp salt-master &&\
+    apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
+
+COPY ./vars-vars /etc/vars-vars
+
+COPY ./vars-files /etc/vars-files
+
+COPY ./common.sh /common.sh
+
+COPY run.sh /run.sh
+
+RUN mkdir "${CONFIG_DIR}"
+
+COPY ./config "${CONFIG_DIR}"
+
+CMD ["/run.sh"]

salt/common.sh

@@ -0,0 +1,41 @@
+export CONFIG_DIR="/etc/default/config-files/"
+
+resolv_host()
+{
+  hostname="${1}"
+  ip=$(getent hosts "${hostname}" | cut -d' ' -f1)
+  echo "${ip}"
+}
+
+replace_var()
+{
+  file="${1}"
+  var="${2}"
+  sed -e "s?${var}?${!var}?g" -i "${file}"
+}
+
+replace_vars()
+{
+  file="${1}"
+  for var in $(cat /etc/vars-vars)
+  do
+    replace_var "${file}" "${var}"
+  done
+}
+
+replace_files()
+{
+  cat /etc/vars-files | while read line
+  do
+    filesrc="${CONFIG_DIR}$(echo "${line}" | awk '{print $1}')"
+    filedst=$(echo "${line}" | awk '{print $2}')
+    if [ -f "${filesrc}" ]
+    then
+      echo "Expanding file ${filesrc} to ${filedst}"
+      cp "${filesrc}" "${filedst}"
+      replace_vars "${filedst}"
+    else
+      echo "File ${filesrc} does not exist. Skipping."
+    fi
+  done
+}

salt/config/ssmtp.conf

@@ -0,0 +1,19 @@
+# Configuartion file for sSMTP sendmail
+
+# The person who gets all mail for userids < 1000
+# Make this empty to disable rewriting.
+root=SSMTP_ROOT
+
+# We want to use this with an exim container. Link these
+# so that that container will be reachable as 'exim' in
+# this container.
+mailhub=SSMTP_MAILHUB
+
+# Where will the mail seem to come from?
+rewriteDomain=SSMTP_MAILDOMAIN
+
+# The full hostname
+#hostname=
+
+# Are users allowed to set their own From: address? (YES/NO)
+FromLineOverride=YES

salt/run.sh

@@ -0,0 +1,7 @@
+#! /usr/bin/env bash
+
+. /common.sh
+
+replace_files
+
+salt-master

salt/vars-files

@@ -0,0 +1,2 @@
+ssmtp.conf /etc/ssmtp/ssmtp.conf
+master /etc/salt/master

salt/vars-vars

@@ -0,0 +1,5 @@
+SSMTP_ROOT
+SSMTP_MAILHUB
+SSMTP_MAILDOMAIN
+
+NUT_ROOT_PASSWD

update_vars.sh

@@ -0,0 +1,7 @@
+#! /usr/bin/env sh
+
+vars=$(cat env | cut -d= -f1)
+for docker in salt
+do
+  echo "${vars}" > "./${docker}/vars-vars"
+done