ganeti: init

ganeti/files/ferm.conf

+domain (ip) {
+  table filter {
+    chain INPUT {
+      saddr 192.168.43.0/28 ACCEPT;
+    }
+  }
+}
+

ganeti/init.sls

+ganeti:
+  pkg.installed:
+    - pkgs:
+      - ganeti
+      - ganeti-instance-debootstrap
+{%- if grains['osfinger'] == 'Debian-8' %}
+    - fromrepo: jessie-backports
+{%- endif %}
+
+/etc/ferm/conf.d/ganeti.conf:
+  file.managed:
+    - source: salt://ganeti/files/ferm.conf
+    - user: root
+    - group: root
+    - mode: 644

top.sls

@@ -16,6 +16,9 @@ base:
     - ntp
     - prometheus
     - logrotate
+  'roles:vmhost':
+    - match: pillar
+    - ganeti
   'salt.ffm.freifunk.net':
     - salt.master
   'bgp*.ffm.freifunk.net':