grub

Table of Contents

1. Overview
2. Module Description - What the module does and why it is useful
3. Setup - The basics of getting started with grub
   • What grub affects
   • Setup requirements
   • Beginning with grub
4. Usage - Configuration options and additional functionality
   • Manage client and server
   • Ansible client
   • Ansible Server
5. Reference - An under-the-hood peek at what the module is doing and how
   • Classes
6. Limitations - OS compatibility, etc.
7. Development - Guide for contributing to the module

Overview

This module installs is used to manage grub, specificly we wanted a way to secure the grub menu entry which i did not find at the time. In future we will look to migrate to herculesteam-augeasproviders_grub

Setup

What grub affects

• Manages the grub menu item and superusers

Setup Requirements

• puppetlabs-stdlib 4.12.0

Beginning with grub

just add the grub class.

class {'::grub' }

Usage

Add an user and password and protectect edit functions

class {'::grub' 
  user => 'test',
  password => grub.pbkdf2.sha512.10000.$SOMHEHASH,
}

of with hiera

grub::user: test
grup::password: grub.pbkdf2.sha512.10000.$SOMHEHASH

Reference

Classes

Public Classes

• grub

Class: grub

Main class, includes all other classes

Parameters

• user (Optional[String]): The user to secure grub. If the username and password are present then by default they will be required to edit grub config at boot
• password (Optional[String]): The password to secure grub
• protect_boot (Boolean, Default: false): If true also require the username and password toboot the system
• protect_advanced (Boolean, Default: false): If true also require the username and password to access the advanced menu

Limitations

This module is tested on Ubuntu 14.04, and 16.04