Franziska Kunsmann
24362768fb
All checks were successful
bundlewrap/pipeline/head This commit looks good
54 lines
1.4 KiB
Python
54 lines
1.4 KiB
Python
defaults = {
|
|
'apt': {
|
|
'packages': {
|
|
'isc-dhcp-server': {},
|
|
},
|
|
},
|
|
'bash_aliases': {
|
|
'leases': 'sudo dhcp-lease-list | tail -n +4 | sort -k 2,2',
|
|
},
|
|
}
|
|
|
|
|
|
@metadata_reactor.provides(
|
|
'dhcpd/fixed_allocations',
|
|
)
|
|
def get_static_allocations(metadata):
|
|
allocations = {}
|
|
for rnode in repo.nodes:
|
|
if rnode.metadata.get('location', '') != metadata.get('location', ''):
|
|
continue
|
|
|
|
for iface_name, iface_config in rnode.metadata.get('interfaces', {}).items():
|
|
if iface_config.get('dhcp', False):
|
|
try:
|
|
allocations[f'{rnode.name}_{iface_name}'] = {
|
|
'ipv4': sorted(iface_config['ips'])[0],
|
|
'mac': iface_config['mac'],
|
|
}
|
|
except KeyError:
|
|
pass
|
|
|
|
return {
|
|
'dhcpd': {
|
|
'fixed_allocations': allocations,
|
|
}
|
|
}
|
|
|
|
|
|
@metadata_reactor.provides(
|
|
'iptables/bundle_rules/dhcpd',
|
|
)
|
|
def iptables(metadata):
|
|
rules = set()
|
|
for subnet in node.metadata.get('dhcpd/subnets', {}):
|
|
rules.add('iptables -A INPUT -i {} -p udp --dport 67:68 -j ACCEPT'.format(subnet))
|
|
|
|
return {
|
|
'iptables': {
|
|
'bundle_rules': {
|
|
# can't use port_rules here, because we're generating interface based rules.
|
|
'dhcpd': sorted(list(rules)),
|
|
},
|
|
}
|
|
}
|