icinga2.ssh_client

salt/init.sls

@@ -18,7 +18,7 @@ pip install salt:
     - require:
       - cmd: 'make salt venv'
 
-{%   for link in ('salt', 'salt-call', 'salt-minion', 'salt-proxy') %}
+{%   for link in ('salt', 'salt-call', 'salt-minion', 'salt-proxy', 'salt-run', 'salt-key') %}
 /usr/bin/{{ link }}:
   file.symlink:
     - target: /opt/saltstack/salt/bin/{{ link }}
@@ -54,6 +54,25 @@ salt-{{ daemon }}:
       - file: /etc/salt/{{ daemon }}
 {%   endfor %}
 
+{% elif grains['os'] == 'Debian' %}
+
+/etc/apt/keyrings/salt-archive-keyring-2023.gpg:
+  file.managed:
+    - source: https://repo.saltproject.io/salt/py3/debian/11/amd64/SALT-PROJECT-GPG-PUBKEY-2023.gpg
+    - source_hash: c6f6cbcd96fdb130b1dde8dcfc05d46a3a3f322ff0514f98e2e6473896243472
+
+{% if grains['osrelease']|int > 11 %}
+  {% set osrelease = 11 %}
+  {% set oscodename = 'bullseye' %}
+{% else %}
+  {% set osrelease = grains['osrelease'] %}
+  {% set oscodename = grains['oscodename'] %}
+{% endif %}
+
+/etc/apt/sources.list.d/salt.list:
+  file.managed:
+    - contents: "deb [signed-by=/etc/apt/keyrings/salt-archive-keyring-2023.gpg arch=amd64] https://repo.saltproject.io/salt/py3/debian/{{ osrelease }}/amd64/minor/{{ salt.pillar.get("salt:version") }} {{ oscodename }} main"
+
 {% elif grains['os'] == 'Ubuntu' %}
 
 /etc/apt/keyrings/salt-archive-keyring-2023.gpg:
@@ -87,6 +106,29 @@ salt-{{ daemon }}:
       - file: /etc/salt/{{ daemon }}
 {%   endfor %}
 
+# FIXME: D.R.Y.
+salt-common:
+  pkg.installed:
+    - version: '{{ salt.pillar.get("salt:version") }}'
+    - refresh: true
+    - require:
+      - file: /etc/apt/keyrings/salt-archive-keyring-2023.gpg
+      - file: /etc/apt/sources.list.d/salt.list
+
+{%   for daemon in salt_daemons %}
+salt-{{ daemon }}:
+  pkg.installed:
+    - version: '{{ salt.pillar.get("salt:version") }}'
+    - require:
+      - pkg: salt-common
+  service.running:
+    - enable: true
+    - require:
+      - pkg: salt-{{ daemon }}
+    - listen:
+      - file: /etc/salt/{{ daemon }}
+{%   endfor %}
+
 {% elif grains['os_family'] == 'RedHat' %}
 
 /etc/pki/rpm-gpg/SALT-PROJECT-GPG-PUBKEY-2023: