Title: Deploying munin-node with drist

	Title: Deploying munin-node with drist
	Author: Solène
	Date: 17 April 2019
	Tags: drist automation openbsd
	Description:

	The following guide is a real world example of drist usage. We will
	create a script to deploy munin-node on OpenBSD systems.

	We need to create a script that will install munin-node package but
	also configure it using the default proposal. This is done easily
	using the script file.

	#!/bin/sh

	pkg_info \| grep munin-node
	if [ $? -ne 0 ]; then
	pkg_add munin-node
	munin-node-configure --suggest --shell \| sh
	rcctl enable munin_node
	fi


	The script contains some simple logic to prevent trying installing
	munin-node each time we will run it, and also prevent re-configuring it
	automatically every time. This is done by checking if pkg_info output
	contains munin-node.

	We also need to provide a munin-node.conf file to allow our munin
	server to reach the nodes. For this how-to, I'll dump the
	configuration in the commands using cat, but of course, you can use
	your favorite editor to create the file, or copy an original
	munin-node.conf file and edit it to suit your needs.

	mkdir -p files/etc/munin/

	log_level 4
	log_file /var/log/munin/munin-node.log
	pid_file /var/run/munin/munin-node.pid
	background 1
	setsid 1
	user root
	group wheel
	ignore_file [\#~]$
	ignore_file DEADJOE$
	ignore_file \.bak$
	ignore_file %$
	ignore_file \.dpkg-(tmp\|new\|old\|dist)$
	ignore_file \.rpm(save\|new)$
	ignore_file \.pod$
	allow ^127\.0\.0\.1$
	allow ^192\.168\.1\.100$
	allow ^::1$
	host *
	port 4949
	EOF

	Now, we only need to use drist on the remote host:

	drist root@myserver

	Last version of drist as now also supports privilege escalation using
	doas instead of connecting to root by ssh:

	drist -s -e doas user@myserver