foreman_discovery 1.1.1 → 1.2.0.rc1

data/extra/ovirt-node-plugin-foreman/conf/Makefile.am

@@ -0,0 +1,29 @@
+# vim: ts=8:sw=8:noet
+#
+# Copyright (C) 2013 Red Hat, Inc.
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; version 2 of the License.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
+# MA  02110-1301, USA.  A copy of the GNU General Public License is
+# also available at http://www.gnu.org/copyleft/gpl.html.
+# Copyright (C) 2010, Red Hat, Inc.
+#
+
+EXTRA_DIST= \
+	    foreman-plugin.*
+
+pluginsdir = $(sysconfdir)/ovirt-plugins.d
+
+dist_plugins_DATA = \
+		    foreman-plugin.logs \
+		    foreman-plugin.firewall

data/extra/ovirt-node-plugin-foreman/conf/foreman-plugin.firewall.in

@@ -0,0 +1,4 @@
+# Note that we uninstall ovirt-node so this is not effective, but we
+# keep this for completeness of the foreman plugin.
+8443,tcp
+@EXTRA_FIREWALL_RULE@

data/extra/ovirt-node-plugin-foreman/conf/foreman-plugin.logs

@@ -0,0 +1,2 @@
+# no relevant log files for foreman
+# (we are logging everything in /tmp in development mode)

data/extra/ovirt-node-plugin-foreman/configure.ac

@@ -0,0 +1,62 @@
+# vim: ts=8:sw=8:noet
+#
+# Copyright (C) 2013 Red Hat, Inc.
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; version 2 of the License.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
+# MA  02110-1301, USA.  A copy of the GNU General Public License is
+# also available at http://www.gnu.org/copyleft/gpl.html.
+
+AC_INIT([ovirt-node-plugin-foreman], [0.3.0], [foreman-dev@googlegroups.com])
+AM_INIT_AUTOMAKE([-Wall -Werror foreign -Wno-portability tar-pax])
+AC_SUBST([ENGINENAME], ['Foreman Discovery'])
+PKG_PROG_PKG_CONFIG
+
+AC_MSG_CHECKING([whether to enable plugin debug support])
+AC_ARG_ENABLE(debug,
+	AS_HELP_STRING([--enable-debug],
+		       [turn on debug support (starts ssh daemon and sets root password)]))
+if test x$enable_debug = xyes; then
+	AC_MSG_RESULT([yes])
+	AC_MSG_NOTICE([WARNING: ssh daemon enabled and root password set to 'development'])
+	PLUGIN_DEBUG=1
+	EXTRA_FIREWALL_RULE="22,tcp"
+else
+	AC_MSG_RESULT([no])
+	PLUGIN_DEBUG=0
+	EXTRA_FIREWALL_RULE="#22,tcp"
+fi
+AC_SUBST(PLUGIN_DEBUG)
+AC_SUBST(EXTRA_FIREWALL_RULE)
+
+AC_MSG_CHECKING([for systemd unit directory])
+AC_ARG_WITH([systemdsystemunitdir],
+	AS_HELP_STRING([--with-systemdsystemunitdir=DIR],
+		   [Directory for systemd service files]),
+	[], [with_systemdsystemunitdir=$($PKG_CONFIG --variable=systemdsystemunitdir systemd)])
+if test "x$with_systemdsystemunitdir" != xno; then
+	AC_SUBST([systemdsystemunitdir], [$with_systemdsystemunitdir])
+fi
+AM_CONDITIONAL(HAVE_SYSTEMD, [test -n "$with_systemdsystemunitdir" -a "x$with_systemdsystemunitdir" != xno ])
+AC_MSG_RESULT([done])
+
+AC_CONFIG_FILES([Makefile
+		 src/Makefile
+		 conf/Makefile
+		 recipe/Makefile
+		 src/discover-host.rb
+		 conf/foreman-plugin.firewall
+		 src/discovery-version-fact.rb
+		 ovirt-node-plugin-foreman.spec])
+
+AC_OUTPUT

data/extra/ovirt-node-plugin-foreman/ovirt-node-plugin-foreman.spec.in

@@ -0,0 +1,145 @@
+# vim: ts=4:sw=4:et
+#
+# Copyright (C) 2013 Red Hat, Inc.
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; version 2 of the License.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
+# MA  02110-1301, USA.  A copy of the GNU General Public License is
+# also available at http://www.gnu.org/copyleft/gpl.html.
+
+Summary:        A plugin for Foreman Discovery nodes
+Name:           ovirt-node-plugin-foreman
+Version:        @VERSION@
+Release:        1%{?BUILD_NUMBER}%{?extra_release}%{?dist}
+Source0:        %{name}-%{version}.tar.gz
+License:        GPLv2+
+Group:          Applications/System
+
+BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-buildroot
+URL:            http://www.ovirt.org/
+Requires:       ovirt-node >= 3.0.0
+Requires:	    facter
+Requires:	    foreman-proxy
+Requires:	    sudo
+%if "@PLUGIN_DEBUG@" == "1"
+Requires:	    openssh-server
+Requires:       vim-minimal
+Requires:	    file telnet lsof
+%endif
+
+BuildArch:      noarch
+
+BuildRequires:  systemd
+
+%define app_root %{_datadir}/%{name}
+%define recipe_root %{_datadir}/ovirt-node-recipe
+
+%description
+Provides Foreman Proxy and Discovery component for automatic registration
+of nodes in Foreman and provisioning.
+
+%package recipe
+Summary:        Kickstarts for building Node isos including %{name}
+Group:          Applications/System
+Requires:       ovirt-node-recipe >= 2.6.0
+
+%description recipe
+Provides kickstart files for generating an oVirt Node ISO image containing
+%{name}.
+
+%prep
+%setup -q
+
+
+%build
+%if "@PLUGIN_DEBUG@" == "1"
+%configure --enable-debug
+%else
+%configure
+%endif
+
+%install
+%{__rm} -rf %{buildroot}
+make install DESTDIR=%{buildroot}
+
+%post
+# Modify login issue
+sed -i 's/oVirt Node Hypervisor/Foreman Discovery/' /etc/issue
+
+# Reserve tty1 only for logs
+rm -f /etc/systemd/system/getty.target.wants/getty@tty1.service
+
+# In development mode set password and enable ssh daemon (with root access)
+%if "@PLUGIN_DEBUG@" == "1"
+echo "root:development" | chpasswd
+sed -i 's/^.*PasswordAuthentication.*$/PasswordAuthentication yes/' /etc/ssh/sshd_config
+sed -i 's/^.*PermitRootLogin.*$/PermitRootLogin yes/' /etc/ssh/sshd_config
+%endif
+
+# Configure foreman-proxy
+%if "@PLUGIN_DEBUG@" == "1"
+LOGLEVEL="DEBUG"
+%else
+LOGLEVEL="ERROR"
+%endif
+sed -i 's|.*:log_file:.*|:log_file: /dev/stdout|' /etc/foreman-proxy/settings.yml
+sed -i "s/.*:log_level:.*/:log_level: $LOGLEVEL/" /etc/foreman-proxy/settings.yml
+sed -i 's/.*:bmc:.*/:bmc: true/' /etc/foreman-proxy/settings.yml
+sed -i 's/.*:bmc_default_provider:.*/:bmc_default_provider: shell/' /etc/foreman-proxy/settings.yml
+
+# Connect smart-proxy standard output to tty1
+sed '/^ExecStart/aStandardOutput=tty' -i /usr/lib/systemd/system/foreman-proxy.service
+sed '/^ExecStart/aTTYPath=/dev/tty1' -i /usr/lib/systemd/system/foreman-proxy.service
+
+# Enable Foreman Proxy service
+systemctl enable foreman-proxy.service
+
+# Enable Discover Host service (must be executed as the last - idle - service)
+systemctl enable discover-host.service
+
+# Force NetworkManager to wait for IP address
+systemctl enable NetworkManager-wait-online.service
+
+# Add foreman-proxy user to sudo and disable interactive tty for reboot
+sed -i -e 's/^Defaults.*requiretty/Defaults !requiretty/g' /etc/sudoers
+echo "foreman-proxy ALL=NOPASSWD: /sbin/shutdown" >> /etc/sudoers
+
+# Limit maximum use of systemd journal (it is kept in memory for stateless)
+sed -i -e 's/^.*SystemMaxUse.*$/SystemMaxUse=20M/g' /etc/systemd/journald.conf
+
+# When using ntpdate during start, do not pause when time servers not available
+[ -f /etc/sysconfig/ntpdate ] && sed -i -e 's/^.*RETRIES.*$/RETRIES=0/g' /etc/sysconfig/ntpdate
+
+# Set extra directory for facter
+sed -i '/\[Service\]/a Environment="FACTERLIB=/usr/share/ovirt-node-plugin-foreman"' /usr/lib/systemd/system/foreman-proxy.service
+
+%preun
+
+%files recipe
+%{recipe_root}
+
+%files
+%{_bindir}/discover-host.rb
+%{_bindir}/find-missing-libs
+%{_datadir}/%{name}/discovery-version-fact.rb
+%{_unitdir}/discover-host.service
+%{_sysconfdir}/ovirt-plugins.d
+
+%changelog
+* Thu Dec 19 2013 Lukas Zapletal <lzap+rpm@redhat.com> 0.2.0-1
+- Logging on tty1
+- Changes to /etc/issue
+- Faster start
+
+* Wed Oct 30 2013 Lukas Zapletal <lzap+rpm@redhat.com> 0.1.0-1
+- Initial version

data/extra/ovirt-node-plugin-foreman/recipe/Makefile.am

@@ -0,0 +1,33 @@
+# vim: ts=8:sw=8:noet
+#
+# Copyright (C) 2013 Red Hat, Inc.
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; version 2 of the License.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
+# MA  02110-1301, USA.  A copy of the GNU General Public License is
+# also available at http://www.gnu.org/copyleft/gpl.html.
+
+EXTRA_DIST = *.ks
+
+OVIRT_NODE_RECIPEdir = $(datadir)/ovirt-node-recipe
+pluginsdir = $(sysconfdir)/ovirt-plugins.d
+
+OVIRT_NODE_RECIPE_DATA = \
+			 foreman-plugin-minimizer.ks \
+			 foreman-plugin-iso.ks
+
+dist_plugins_DATA = \
+		    foreman-plugin-minimizer.ks
+
+install-data-hook:
+	mv $(DESTDIR)/$(pluginsdir)/foreman-plugin-minimizer.ks $(DESTDIR)/$(pluginsdir)/foreman-plugin.minimize

data/extra/ovirt-node-plugin-foreman/recipe/foreman-plugin-iso.ks

@@ -0,0 +1,5 @@
+%include ovirt-node-image.ks
+%packages --excludedocs --nobase
+ovirt-node-plugin-foreman
+%end
+%include foreman-plugin-minimizer.ks

data/extra/ovirt-node-plugin-foreman/recipe/foreman-plugin-minimizer.ks

@@ -0,0 +1,160 @@
+# Minimize script optimized for Foreman Discovery plugin (Fedora 19)
+#
+# Use this to find interesting packages in the image:
+#
+#  rpm -qa --queryformat '%{SIZE} %{NAME}\n' | sort -n -r | head -n100
+# 
+# Use this tool (part of this plugin) to check for missing libs:
+#
+#  find-missing-libs
+#
+
+# ovirt-node and deps
+droprpm ovirt-node
+droprpm collectd
+droprpm collectd-*
+
+# virtualization
+droprpm qemu
+droprpm qemu-*
+droprpm ipxe-roms-qemu
+droprpm xen-licenses
+droprpm vhostmd
+droprpm libvirt
+droprpm libvirt-*
+
+# python
+droprpm python
+droprpm python-*
+droprpm *-python
+droprpm pyliblzma
+droprpm pyxattr
+droprpm pygpgme
+droprpm pygobject*
+
+# selinux (need to provide selinux=0 kernel argument)
+droprpm selinux-policy-targeted
+droprpm policycoreutils
+
+# x window
+droprpm cairo
+droprpm cairo-gobject
+droprpm colord-libs
+droprpm gdk-pixbuf2
+droprpm gsettings-desktop-schemas
+droprpm gtk3
+droprpm hicolor-icon-theme
+droprpm libsndfile
+droprpm libvorbis
+droprpm libX*
+droprpm libxcb
+droprpm mesa-*
+droprpm pango
+droprpm pulseaudio-libs
+droprpm SDL
+droprpm vte3
+
+# various
+droprpm acpid
+droprpm aic94xx-firmware
+droprpm alsa-lib
+droprpm anyterm
+droprpm avahi
+droprpm bc
+droprpm bfa-firmware
+droprpm bridge-utils
+droprpm btrfs-progs
+droprpm ceph-libs
+droprpm cracklib-dicts
+droprpm device-mapper-multipath
+droprpm dmraid
+droprpm dosfstools
+droprpm dracut-fips
+droprpm dracut-network
+droprpm e2fsprogs
+droprpm efibootmgr
+droprpm fcoe-utils
+droprpm gdb
+droprpm glusterfs
+droprpm glusterfs-*
+droprpm hwdata
+droprpm irqbalance
+droprpm iscsi-initiator-utils
+droprpm jfsutils
+droprpm kbd-misc
+droprpm kexec-tools
+droprpm kpartx
+droprpm less
+droprpm libguestfs
+droprpm libguestfs-*
+droprpm libicu
+droprpm libmlx4
+droprpm mcelog
+droprpm net-snmp-libs
+droprpm ntfs-3g
+droprpm ntfsprogs
+droprpm numactl
+droprpm openssh-clients
+droprpm parted
+droprpm patch
+droprpm pciutils
+droprpm plymouth
+droprpm plymouth-*
+droprpm poppler-data
+droprpm psmisc
+droprpm PyPAM
+droprpm reiserfs-utils
+droprpm rsync
+droprpm rsyslog
+droprpm setools-console
+droprpm sos
+droprpm spice-server
+droprpm squashfs-tools
+droprpm strace
+droprpm sysfsutils
+droprpm sysstat
+droprpm systemtap-runtime
+droprpm tcpdump
+droprpm tuned
+droprpm tzdata
+droprpm urw-fonts
+droprpm usbutils
+droprpm vconfig
+droprpm xen-libs
+droprpm xfsprogs
+droprpm zfs-fuse
+
+# various files/directories
+drop /usr/share/gems/cache
+drop /usr/share/qemu
+drop /usr/share/mime
+drop /usr/share/groff
+drop /usr/share/locale
+
+# The following packages are REQUIRED
+#
+# ruby
+# facter
+# sudo
+# ipmitool
+
+# The following packages are required to boot
+#
+# ncurses-libs
+# NetworkManager-glib
+# grubby
+# libselinux
+# lua
+# sqlite
+# openldap
+# mozjs17
+
+# The following packages SHOULD not be dropped
+# (used in development mode)
+#
+# file
+# vim-minimal
+# openssh-server
+# lsof
+
+# EOF

data/extra/ovirt-node-plugin-foreman/src/Makefile.am

@@ -0,0 +1,32 @@
+# vim: ts=8:sw=8:noet
+#
+# Copyright (C) 2013 Red Hat, Inc.
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; version 2 of the License.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
+# MA  02110-1301, USA.  A copy of the GNU General Public License is
+# also available at http://www.gnu.org/copyleft/gpl.html.
+
+dist_bin_SCRIPTS = \
+		   discover-host.rb \
+		   find-missing-libs
+
+if HAVE_SYSTEMD
+dist_systemdsystemunit_DATA = discover-host.service
+endif
+
+dist_pkgdata_DATA = discovery-version-fact.rb
+
+CLEANFILES = \
+	     discover-host.rb \
+	     discovery-version-fact.rb

data/extra/ovirt-node-plugin-foreman/src/discover-host.rb.in

@@ -0,0 +1,186 @@
+#!/usr/bin/env ruby
+#
+# vim: ts=2:sw=2:et
+#
+# Copyright (C) 2012-2013 Red Hat, Inc.
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; version 2 of the License.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
+# MA  02110-1301, USA.  A copy of the GNU General Public License is
+# also available at http://www.gnu.org/copyleft/gpl.html.
+
+PACKAGE_NAME = '@PACKAGE_NAME@'
+PACKAGE_VERSION = '@PACKAGE_VERSION@'
+ENGINE_NAME = '@ENGINENAME@'
+DEBUG = ('@PLUGIN_DEBUG@'.to_i == 1) rescue false
+PROXY_CACHE = '/tmp/proxy_cache'
+
+require 'fileutils'
+require 'net/http'
+require 'net/https'
+require 'uri'
+
+# For comparison
+require 'rubygems'
+require 'facter'
+require 'yaml'
+
+BANNER = <<'EOS'
+
+
+
+  _____
+ |  ___|__  _ __ ___ _ __ ___   __ _ _ __
+ | |_ / _ \| '__/ _ \ '_ ` _ \ / _` | '_ \
+ |  _| (_) | | |  __/ | | | | | (_| | | | |
+ |_|__\___/|_|  \___|_| |_| |_|\__,_|_| |_|
+   |  _ \(_)___  ___ _____   _____ _ __ _   _
+   | | | | / __|/ __/ _ \ \ / / _ \ '__| | | |
+   | |_| | \__ \ (_| (_) \ V /  __/ |  | |_| |
+   |____/|_|___/\___\___/ \_/ \___|_|   \__, |
+                                        |___/
+
+
+EOS
+
+$start_time = Time.now
+def time_prefix
+  Time.at(Time.now - $start_time).strftime("[%_4s]")
+rescue
+  "[ ? ]"
+end
+
+def println msg
+  puts "#{time_prefix} #{msg}\n"
+end
+
+def debug msg
+  if DEBUG
+    println msg
+  end
+end
+
+def error msg
+  $stderr.puts "#{time_prefix} #{msg}"
+end
+
+def cmdline
+  return File.open("/proc/cmdline", 'r') { |f| f.read }
+end
+
+def discover_server
+  debug "Parsing kernel line: #{cmdline}"
+  server = (discover_by_pxe or discover_by_dns)
+  unless server =~ /^http/
+    server = "http://#{server}"
+  end
+  server
+end
+
+def discover_by_pxe
+  begin
+    server_ip = cmdline.split.map { |x| $1 if x.match(/foreman.ip=(.*)/)}.compact
+    if server_ip.size == 1
+      result = server_ip.join
+      println "Discovered by PXE: #{result}"
+      return result
+    else
+      return false
+    end
+  rescue
+    return false
+  end
+end
+
+def discover_by_dns
+  begin
+    server_name = cmdline.split.map { |x| $1 if x.match(/foreman.server=(.*)/)}.compact
+    server_name = server_name.size == 1 ? server_name.join : 'foreman'
+
+    require 'socket'
+    result = TCPSocket.gethostbyname(server_name)[3..-1].first || false
+    println "Discovered by DNS: #{result}"
+    return result
+  rescue
+    return false
+  end
+end
+
+def upload
+  ip = Facter.value('ipaddress')
+  server = discover_server
+  println "Triggering import of facts from Foreman (#{server}, ip=#{ip})"
+  data = ip.nil? ? {} : {'ip' => ip}
+  begin
+    uri = URI.parse(server)
+    http = Net::HTTP.new(uri.host, uri.port)
+    if uri.scheme == 'https' then
+      http.use_ssl = true
+      http.verify_mode = OpenSSL::SSL::VERIFY_NONE
+    end
+    req = Net::HTTP::Post.new("/discovers")
+    req.set_form_data(data)
+    response = http.request(req)
+    debug "Response from Foreman #{response.code}: #{response.body}"
+    if response.code == "200"
+      return true
+    else
+      return false
+    end
+  rescue Exception => e
+    error "Could not send facts to Foreman: #{e}"
+    return false
+  end
+end
+
+def write_cache(data)
+  File.open(PROXY_CACHE, 'w') {|f| f.write(data) }
+end
+
+def read_cache
+  File.read(PROXY_CACHE)
+rescue => e
+  "empty cache"
+end
+
+# Main
+
+$stdout.reopen("/dev/tty1", "w")
+$stderr.reopen("/dev/tty1", "w")
+
+# Script was (re)started - delete old data
+File.unlink(PROXY_CACHE) if File.exists?(PROXY_CACHE)
+
+puts "\e[H\e[2J"
+println BANNER
+TAG = DEBUG ? 'D' : 'P'
+println "This is Foreman Discovery #{PACKAGE_VERSION} (#{TAG}), tty1 is reserved for logs. "
+if DEBUG
+  println "The image was build with debug support, you can switch over to tty2+ "
+  println "and login as root/development."
+end
+println "Some interesting facts about this system:"
+facts = Facter.to_hash.select {|k,v| k =~ /address|hardware|manufacturer|productname|memorytotal/}
+facts.keys.sort.each {|k| println " #{k}: #{facts[k]}"}
+println "\nLogs from discovery services now follows:"
+
+# loop, but only upload on changes
+while true do
+  sleep DEBUG ? 30 : 60
+  uninteresting_facts=/kernel|operatingsystem|osfamily|ruby|path|time|swap|free|filesystem|version|selinux/i
+  facts = Facter.to_hash.reject! {|k,v| k =~ uninteresting_facts }
+  unless YAML.load(read_cache) == facts
+    debug "Fact cache invalid, reloading to foreman"
+    write_cache(YAML.dump(facts)) if upload
+  end
+end

data/extra/ovirt-node-plugin-foreman/src/discover-host.service

@@ -0,0 +1,14 @@
+[Unit]
+Description=Discover this host to Foreman
+Wants=basic.target
+After=basic.target network.target nss-lookup.target
+
+[Service]
+Type=idle
+ExecStartPre=/usr/sbin/iptables -I INPUT 1 -m state --state NEW -m tcp -p tcp --dport 8443 -j ACCEPT
+ExecStart=/usr/bin/discover-host.rb
+KillMode=process
+Restart=always
+
+[Install]
+WantedBy=multi-user.target