Sync devbuilds to downloads.adblockplus.org

modules/downloadserver/manifests/init.pp

 class downloadserver {
   user {'stats':
     ensure => present,
     home => '/home/stats',
     managehome => true
   }
 
   file {'/home/stats/.ssh':
     ensure => directory,
     owner => stats,
@@ skipping 78 matching lines @@
     require => Nginx::Hostconfig['downloads.adblockplus.org'],
     source => 'puppet:///modules/downloadserver/logrotate'
   }
 
   cron {'mirror':
     ensure => present,
     command => 'hg pull -q -u -R /var/www/downloads/',
     user => hg,
     minute => '*/10'
   }
+
+  user {'rsync':
+    ensure => present,
+    home => '/home/rsync',
+    managehome => true
+  }
+
+  file {'/home/rsync/.ssh':
+    ensure => directory,
+    require => User['rsync'],
+    owner => rsync,
+    mode => 0600;
+  }
+
+  file {'/home/rsync/.ssh/known_hosts':
+    ensure => file,
+    owner => rsync,
+    mode => 0444,
+    source => 'puppet:///modules/downloadserver/known_hosts'
+  }
+
+  file {'/home/rsync/.ssh/id_rsa':
+    ensure => file,
+    owner => rsync,
+    mode => 0400,
+    source => 'puppet:///modules/private/rsync@downloads.adblockplus.org'
+  }
+
+  file {'/home/rsync/.ssh/id_rsa.pub':
+    ensure => file,
+    owner => rsync,
+    mode => 0400,
+    source => 'puppet:///modules/private/rsync@downloads.adblockplus.org.pub'
+  }
+
+  cron {'mirror-devbuilds':
+    ensure => present,
+    require => [File['/home/rsync/.ssh/known_hosts'],
+                File['/home/rsync/.ssh/id_rsa'],
+                Exec['fetch_downloads']]
+    command => 'rsync -e ssh -ltprz rsync@adblockplus.org:. /var/www/downloads/devbuilds',

[Wladimir Palant, 2013/06/19 10:43:44]

1) The rsync user on adblockplus.org is locked down to a single directory, we
should use a new user here - maybe devbuilds.

2) The /var/www/downloads directory is a Mercurial repository that's being
updated frequently. It's better to have the dev builds in a separate repository
but change the nginx config to put them under /devbuilds anyway.

+    user => rsync,
+    hour => '*',
+    minute => '4-54/10'
+  }
 }