Added volume name for KVM images

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Tightened security settings for sshd config

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Updated provision pattern

  - Added provision script for spinning up KVM guests
  - Moved provision-rsync modules from binhost pattern to provision pattern
  - Added boot updates directory to rsync so that guest nodes can rsync the
    latest /boot directory files (kernel and initramfs)

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Organized rules for all iptables

  - Removed broken rules from old hypervisor configuration
  - Explicitly defined default tables

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Added scripts to facilitate rsnapshot backups

validate-rsync.sh is called on ssh login via the ssh config. If the connection
validates, the rsync_wrapper script will be called which actually performs the
backup.

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Added sysctl configuration

- sysctl now defines the hostname and domain name
- also tightened TCP/IP stack security

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Updated resolver configuration

If local DNS servers are defined, those will be used. Otherwise, OpenDNS will be
used.

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Updated hiera configuration files

- Set a default rootpw for ldap nodes (aka - a nonworking password).
- Updated NFS exports for sol to use subtree_check

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Updated sol node definition

- Added a path to boot files that nodes can use to keep kernel and initramfs
  files up-to-date.
- Used iptables_type variable instead of hardcoding the value twice

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Minor fixes

- Fixed gentoo spacing for class def
- Added a check for the KVM guest image directory on hypervisors

Signed-off-by: Byron Sanchez <byron@hackbytes.com>