feat(TOFS): ssh sshd configs known_host and banner

openssh/files/default/ssh_config

@@ -0,0 +1,136 @@
+{% from "openssh/map.jinja" import ssh_config with context %}
+
+{#- present in ssh_config and known in actual file options -#}
+{%- set processed_options = [] -%}
+{%- set string_or_list_options = ['KexAlgorithms', 'Ciphers', 'MACs'] -%}
+
+{%- macro render_raw_option(keyword, value) -%}
+  {%- if value is sameas true -%}
+{{ keyword }} yes
+  {%- elif value is sameas false -%}
+{{ keyword }} no
+  {%- elif value is string or value is number -%}
+{{ keyword }} {{ value }}
+  {%- else -%}
+{%- for single_value in value -%}
+{{ keyword }} {{ single_value }}
+{% endfor -%}
+  {%- endif -%}
+{%- endmacro -%}
+
+{%- macro render_host_option(keyword, value) -%}
+{%- if value is sameas true %}
+    {{ keyword }} yes
+  {%- elif value is sameas false %}
+    {{ keyword }} no
+  {%- elif value is string or value is number %}
+    {{ keyword }} {{ value }}
+  {%- else -%}
+    {%- if keyword in string_or_list_options %}
+    {{ keyword }} {{ value|join(',') }}
+    {%- else %}
+    {%- for single_value in value -%}
+    {{ keyword }} {{ single_value }}
+    {%- endfor -%}
+    {%- endif -%}
+{%- endif -%}
+{%- endmacro -%}
+
+{#- generic renderer used for ssh matches, known options, -#}
+{#- and unknown options -#}
+{%- macro render_option(keyword, default, config_dict=ssh_config) -%}
+  {%- set value = config_dict.get(keyword, default) -%}
+{{ render_raw_option(keyword, value) }}
+{%- endmacro -%}
+
+{#- macros for render option according to present -#}
+{%- macro option_impl(keyword, default, present) -%}
+  {%- if present -%}
+    {%- do processed_options.append(keyword) -%}
+    {%- set prefix='' -%}
+  {%- else -%}
+    {%- set prefix='#' -%}
+  {%- endif -%}
+  {#- add prefix to keyword -#}
+  {%- set keyword = prefix ~ keyword -%}
+{{ render_option(keyword, default) }}
+{%- endmacro -%}
+
+{#- macros for render option commented by default -#}
+{%- macro option(keyword, default, present) -%}
+{{ option_impl(keyword, default, keyword in ssh_config) }}
+{%- endmacro -%}
+
+{#- macros for render option uncommented by default -#}
+{%- macro option_default_uncommented(keyword, default, present) -%}
+{{ option_impl(keyword, default, True) }}
+{%- endmacro -%}
+
+{#- macro for collapsing a list into a string -#}
+{%- macro option_collapselist(keyword, sep) -%}
+{%- do processed_options.append(keyword) -%}
+{{keyword}} {{ssh_config.get(keyword)|join(sep)}}
+{%- endmacro -%}
+
+{#- macro for handling an option that can be specified as a list or a string -#}
+{%- macro option_string_or_list(keyword, default, default_commented, sep=',') -%}
+{%- if ssh_config.get(keyword, '') is string -%}
+  {%- if default_commented -%}
+{{ option(keyword, default) }}
+  {%- else -%}
+{{ option_default_uncommented(keyword, default) }}
+  {%- endif -%}
+{%- else -%}
+{{ option_collapselist(keyword, sep) }}
+{%- endif -%}
+{%- endmacro -%}
+
+{%- if ssh_config.get('ConfigBanner', False) -%}
+{{ ssh_config['ConfigBanner'] }}
+{%- else -%}
+# Do not edit this file manually!
+# It will be overwritten by salt!
+{%- endif %}
+{%- set global_src_url = salt ['pillar.get']('__formulas:print_template_url', None) %}
+{%- set local_src_url = salt ['pillar.get']('openssh-formula:print_template_url', None) %}
+{%- if (global_src_url and local_src_url is none) or local_src_url %}
+#
+# Template used to generate this file:
+# {{ source }}
+{%- endif %}
+
+{%- if 'Hosts' in ssh_config %}
+{%- do processed_options.append('Hosts') %}
+{%  for host, conf in ssh_config['Hosts'].items() %}
+Host {{ host }}
+  {%- for key, val in conf.items() -%}
+    {{ render_host_option(key, val) }}
+  {%- endfor %}
+{%- endfor %}
+{%- endif %}
+
+{# Handling unknown in salt template options #}
+{% for keyword in ssh_config.keys() -%}
+  {#- Matches have to be at the bottom and should be handled differently -#}
+  {%- if not keyword in processed_options and keyword != 'matches' -%}
+    {%- if not keyword in string_or_list_options -%}
+{#- send a blank default as it doesn't matter #}
+{{ render_option(keyword, '') }}
+    {%- else -%}
+{#- same as above #}
+{{ option_string_or_list(keyword, '', True) }}
+    {%- endif -%}
+  {%- endif -%}
+{%- endfor -%}
+
+{# Handle matches last as they need to go at the bottom #}
+{% if 'matches' in ssh_config -%}
+  {%- for match in ssh_config['matches'].values() %}
+Match {{ match['type'].keys()[0] }} {{ match['type'].values()[0] }}
+    {%- for keyword in match['options'].keys() %}
+    {{ render_option(keyword, '', config_dict=match['options']) }}
+    {%- endfor %}
+  {%- endfor %}
+{%- endif -%}
+
+{#- vim: set ft=jinja : #}