system-config/modules/jenkins/manifests/slave.pp

class jenkins::slave($ssh_key, $sudo = false, $bare = false, $user = true) {

    include pip

    if ($user == true) {
      class { 'jenkins::jenkinsuser':
        ensure => present,
        sudo => $sudo,
        ssh_key => "${ssh_key}"
      }
    }

    # Packages that all jenkins slaves need
    $common_packages = [
	         "default-jdk", # jdk for building java jobs
                 "build-essential",
                 "ccache",
      		 ]

    # Packages that most jenkins slaves (eg, unit test runners) need
    $standard_packages = [
                 "asciidoc", # for building gerrit/building openstack docs
                 "curl",
                 "docbook-xml", # for building openstack docs
                 "docbook5-xml", # for building openstack docs
                 "docbook-xsl", # for building openstack docs
                 "firefox", # for selenium tests
                 "libapache2-mod-wsgi",
                 "libcurl4-gnutls-dev",
                 "libldap2-dev",
                 "libmysqlclient-dev",
                 "libsqlite3-dev",
                 "libxml2-dev",
                 "libxslt1-dev",
                 "maven2",
                 "pandoc", #for docs, markdown->docbook, bug 924507
                 "python-libvirt",
                 "python-zmq", # zeromq unittests (not pip installable)
                 "python3-all-dev",
                 "sqlite3",
                 "unzip",
                 "wget",
                 "xsltproc", # for building openstack docs
                 "xvfb", # for selenium tests
                 "pyflakes"]

    if ($bare == false) {
        $packages = [$common_packages, $standard_packages]
    } else {
        $packages = $common_packages
    }

    package { $packages:
      ensure => present,
    }

    # Packages that need to be installed from pip
    $pip_packages = [
                 "git-review",
                 "setuptools-git",
                 "tox"]

    package { $pip_packages:
      ensure => latest,  # we want the latest from these
      provider => pip,
      require => Class[pip]
    }

    file { 'profilerubygems':
      name => '/etc/profile.d/rubygems.sh',
      owner => 'root',
      group => 'root',
      mode => 644,
      ensure => 'present',
      source => [
         "puppet:///modules/jenkins/rubygems.sh",
       ],
    }

    file { 'ccachegcc':
      name => '/usr/local/bin/gcc',
      ensure => link,
      target => '/usr/bin/ccache',
      require => Package['ccache'],
    }

    file { 'ccacheg++':
      name => '/usr/local/bin/g++',
      ensure => link,
      target => '/usr/bin/ccache',
      require => Package['ccache'],
    }

    file { 'ccachecc':
      name => '/usr/local/bin/cc',
      ensure => link,
      target => '/usr/bin/ccache',
      require => Package['ccache'],
    }

    file { 'ccachec++':
      name => '/usr/local/bin/c++',
      ensure => link,
      target => '/usr/bin/ccache',
      require => Package['ccache'],
    }


    if ($bare == false) {

        class {'mysql::server':
            config_hash =>  {
                'root_password' => 'insecure_slave',
                'default_engine' => 'MyISAM',
                'bind_address' => '127.0.0.1',
            }
        }
        include mysql::server::account_security

        mysql::db { 'openstack_citest':
            user     => 'openstack_citest',
            password => 'openstack_citest',
            host     => 'localhost',
            grant    => ['all'],
            require  => [Class['mysql::server'],
                         Class['mysql::server::account_security']]
        }

    }

    file { '/usr/local/jenkins':
      owner => 'root',
      group => 'root',
      mode => 755,
      ensure => 'directory',
    }

    file { '/usr/local/jenkins/slave_scripts':
      owner => 'root',
      group => 'root',
      mode => 755,
      ensure => 'directory',
      recurse => true,
      require => File['/usr/local/jenkins'],
      source => [
                  "puppet:///modules/jenkins/slave_scripts",
                ],
    }

    file { '/etc/sudoers.d/jenkins-sudo-grep':
      ensure => present,
      source => "puppet:///modules/jenkins/jenkins-sudo-grep.sudo",
      owner => 'root',
      group => 'root',
      mode => 440,
    }

    # Temporary for debugging glance launch problem
    # https://lists.launchpad.net/openstack/msg13381.html
    file { '/etc/sysctl.d/10-ptrace.conf':
      ensure => present,
      source => "puppet:///modules/jenkins/10-ptrace.conf",
      owner => 'root',
      group => 'root',
      mode => 444,
    }

    exec { "ptrace sysctl":
      subscribe => File['/etc/sysctl.d/10-ptrace.conf'],
      refreshonly => true,
      command => "/sbin/sysctl -p /etc/sysctl.d/10-ptrace.conf",
    }
}