Sync devbuilds to downloads.adblockplus.org

modules/downloadserver/manifests/init.pp

Index: modules/downloadserver/manifests/init.pp
===================================================================
--- a/modules/downloadserver/manifests/init.pp
+++ b/modules/downloadserver/manifests/init.pp
@@ -96,4 +96,49 @@
     user => hg,
     minute => '*/10'
   }
+
+  user {'rsync':
+    ensure => present,
+    home => '/home/rsync',
+    managehome => true
+  }
+
+  file {'/home/rsync/.ssh':
+    ensure => directory,
+    require => User['rsync'],
+    owner => rsync,
+    mode => 0600;
+  }
+
+  file {'/home/rsync/.ssh/known_hosts':
+    ensure => file,
+    owner => rsync,
+    mode => 0444,
+    source => 'puppet:///modules/downloadserver/known_hosts'
+  }
+
+  file {'/home/rsync/.ssh/id_rsa':
+    ensure => file,
+    owner => rsync,
+    mode => 0400,
+    source => 'puppet:///modules/private/rsync@downloads.adblockplus.org'
+  }
+
+  file {'/home/rsync/.ssh/id_rsa.pub':
+    ensure => file,
+    owner => rsync,
+    mode => 0400,
+    source => 'puppet:///modules/private/rsync@downloads.adblockplus.org.pub'
+  }
+
+  cron {'mirror-devbuilds':
+    ensure => present,
+    require => [File['/home/rsync/.ssh/known_hosts'],
+                File['/home/rsync/.ssh/id_rsa'],
+                Exec['fetch_downloads']]
+    command => 'rsync -e ssh -ltprz rsync@adblockplus.org:. /var/www/downloads/devbuilds',

[Wladimir Palant, 2013/06/19 10:43:44]

1) The rsync user on adblockplus.org is locked down to a single directory, we
should use a new user here - maybe devbuilds.

2) The /var/www/downloads directory is a Mercurial repository that's being
updated frequently. It's better to have the dev builds in a separate repository
but change the nginx config to put them under /devbuilds anyway.

+    user => rsync,
+    hour => '*',
+    minute => '4-54/10'
+  }
 }