Puppet pam_limits module

This module manages pam_limits configuration files (only).

Overview

This is the Puppet pam_limits module. It can be used to manage particular limits in single /etc/security/limits.conf or in separate files included from /etc/security/limits.d (if "context" was specified). The second feature is only supported on new systems where Augeas can manage these files.

This module is a mix of other Puppet modules and Wiki, esp.:

• http://projects.puppetlabs.com/projects/1/wiki/puppet_augeas#/etc/security/limits.conf
• https://github.com/kupson/puppet-pam_limits/blob/master/manifests/init.pp

to meet these requirements (which other modules didn't):

• modify conf. files with Augeas only
• prepend each Puppet managed limit with comment
• support both limits.conf and includes from limits.d/
• don't install anything

Requirements

Module has been tested on:

• Puppet 2.7
• Debian 6.0

Quick Start

Configure limit

pam_limits { name:
  ensure   => present or absent,
  filename => configuration file,
  domain   => user or group name, wildcard, 
  type     => soft or hard or -,
  item     => limit name,
  value    => limit value;
}

Example: set max number of processes for users in group 'student'

pam_limits { 'nproc-student':
  ensure  => present,
  domain  => '@student',
  type    => 'hard',
  item    => 'nproc',
  value   => '20';
}

CERIT Scientific Cloud, support@cerit-sc.cz