BtSync 0.5.1 → 0.5.3

data/cookbooks/apt/README.md

@@ -0,0 +1,243 @@
+Description
+===========
+
+This cookbook includes recipes to execute apt-get update to ensure the
+local APT package cache is up to date. There are recipes for managing
+the apt-cacher-ng caching proxy and proxy clients. It also includes a
+LWRP for managing APT repositories in /etc/apt/sources.list.d as well as
+an LWRP for pinning packages via /etc/apt/preferences.d.
+
+Requirements
+============
+
+Version 2.0.0+ of this cookbook requires **Chef 11.0.0** or later.
+
+If your Chef version is earlier than 11.0.0, use version 1.10.0 of
+this cookbook.
+
+See [COOK-2258](http://tickets.opscode.com/browse/COOK-2258) for more
+information on this requirement.
+
+Version 1.8.2 to 1.10.0 of this cookbook requires **Chef 10.16.4** or
+later.
+
+If your Chef version is earlier than 10.16.4, use version 1.7.0 of
+this cookbook.
+
+See [CHEF-3493](http://tickets.opscode.com/browse/CHEF-3493) and
+[this code comment](http://bit.ly/VgvCgf) for more information on this
+requirement.
+
+## Platform
+
+* Debian
+* Ubuntu
+
+May work with or without modification on other Debian derivatives.
+
+Recipes
+=======
+
+## default
+
+This recipe installs the `update-notifier-common` package to provide
+the timestamp file used to only run `apt-get update` if the cache is
+more than one day old.
+
+This recipe should appear first in the run list of Debian or Ubuntu
+nodes to ensure that the package cache is up to date before managing
+any `package` resources with Chef.
+
+This recipe also sets up a local cache directory for preseeding packages.
+
+## cacher-ng
+
+Installs the `apt-cacher-ng` package and service so the system can
+provide APT caching. You can check the usage report at
+http://{hostname}:3142/acng-report.html. The `cacher-ng` recipe
+includes the `cacher-client` recipe, so it helps seed itself.
+
+## cacher-client
+
+Configures the node to use the `apt-cacher-ng` server as a client. If you
+want to restrict your node to using the `apt-cacher-ng` server in your
+Environment, set `['apt']['cacher-client']['restrict_environment']` to `true`.
+
+To use a cacher server (or standard proxy server) not available via search
+set the atttribute `['apt']['cacher-ipaddress']` and for a custom port
+set `['apt']['cacher_port']`.
+
+Resources/Providers
+===================
+
+## Managing repositories
+
+This LWRP provides an easy way to manage additional APT repositories.
+Adding a new repository will notify running the `execute[apt-get-update]`
+resource immediately.
+
+### Actions
+
+- :add: creates a repository file and builds the repository listing
+- :remove: removes the repository file
+
+### Attribute Parameters
+
+- repo_name: name attribute. The name of the channel to discover
+- uri: the base of the Debian distribution
+- distribution: this is usually your release's codename...ie something
+  like `karmic`, `lucid` or `maverick`
+- components: package groupings..when it doubt use `main`
+- arch: constrain package to a particular arch like `i386`, `amd64` or
+  even `armhf` or `powerpc`. Defaults to nil.
+- deb_src: whether or not to add the repository as a source repo as
+  well - value can be `true` or `false`, default `false`.
+- keyserver: the GPG keyserver where the key for the repo should be retrieved
+- key: if a `keyserver` is provided, this is assumed to be the
+  fingerprint, otherwise it can be either the URI to the GPG key for
+  the repo, or a cookbook_file.
+- key_proxy: if set, pass the specified proxy via `http-proxy=` to GPG.
+- cookbook: if key should be a cookbook_file, specify a cookbook where
+  the key is located for files/default. Defaults to nil, so it will
+  use the cookbook where the resource is used.
+
+### Examples
+
+    # add the Zenoss repo
+    apt_repository "zenoss" do
+      uri "http://dev.zenoss.org/deb"
+      components ["main","stable"]
+    end
+
+    # add the Nginx PPA; grab key from keyserver
+    apt_repository "nginx-php" do
+      uri "http://ppa.launchpad.net/nginx/php5/ubuntu"
+      distribution node['lsb']['codename']
+      components ["main"]
+      keyserver "keyserver.ubuntu.com"
+      key "C300EE8C"
+    end
+
+    # add the Nginx PPA; grab key from keyserver, also add source repo
+    apt_repository "nginx-php" do
+      uri "http://ppa.launchpad.net/nginx/php5/ubuntu"
+      distribution node['lsb']['codename']
+      components ["main"]
+      keyserver "keyserver.ubuntu.com"
+      key "C300EE8C"
+      deb_src true
+    end
+
+    # add the Cloudkick Repo
+    apt_repository "cloudkick" do
+      uri "http://packages.cloudkick.com/ubuntu"
+      distribution node['lsb']['codename']
+      components ["main"]
+      key "http://packages.cloudkick.com/cloudkick.packages.key"
+    end
+
+    # add the Cloudkick Repo with the key downloaded in the cookbook
+    apt_repository "cloudkick" do
+      uri "http://packages.cloudkick.com/ubuntu"
+      distribution node['lsb']['codename']
+      components ["main"]
+      key "cloudkick.packages.key"
+    end
+
+    # add the Cloudera Repo of CDH4 packages for Ubuntu 12.04 on AMD64
+    apt_repository "cloudera" do
+      uri "http://archive.cloudera.com/cdh4/ubuntu/precise/amd64/cdh"
+      arch "amd64"
+      distribution "precise-cdh4"
+      components ["contrib"]
+      key "http://archive.cloudera.com/debian/archive.key"
+    end
+
+    # remove Zenoss repo
+    apt_repository "zenoss" do
+      action :remove
+    end
+
+## Pinning packages
+
+This LWRP provides an easy way to pin packages in /etc/apt/preferences.d.
+Although apt-pinning is quite helpful from time to time please note that Debian
+does not encourage its use without thorough consideration.
+
+Further information regarding apt-pinning is available via
+http://wiki.debian.org/AptPreferences.
+
+### Actions
+
+- :add: creates a preferences file under /etc/apt/preferences.d
+- :remove: Removes the file, therefore unpin the package
+
+### Attribute Parameters
+
+- package_name: name attribute. The name of the package
+- glob: Pin by glob() expression or regexp surrounded by /.
+- pin: The package version/repository to pin
+- pin_priority: The pinning priority aka "the highest package version wins"
+
+### Examples
+
+    # Pin libmysqlclient16 to version 5.1.49-3
+    apt_preference "libmysqlclient16" do
+      pin "version 5.1.49-3"
+      pin_priority "700"
+    end
+
+    # Unpin libmysqlclient16
+    apt_preference "libmysqlclient16" do
+      action :remove
+    end
+
+    # Pin all packages from dotdeb.org
+    apt_preference "dotdeb" do
+      glob "*"
+      pin "origin packages.dotdeb.org "
+      pin_priority "700"
+    end
+
+Usage
+=====
+
+Put `recipe[apt]` first in the run list. If you have other recipes
+that you want to use to configure how apt behaves, like new sources,
+notify the execute resource to run, e.g.:
+
+    template "/etc/apt/sources.list.d/my_apt_sources.list" do
+      notifies :run, resources(:execute => "apt-get update"), :immediately
+    end
+
+The above will run during execution phase since it is a normal
+template resource, and should appear before other package resources
+that need the sources in the template.
+
+Put `recipe[apt::cacher-ng]` in the run_list for a server to provide
+APT caching and add `recipe[apt::cacher-client]` on the rest of the
+Debian-based nodes to take advantage of the caching server.
+
+If you want to cleanup unused packages, there is also the `apt-get autoclean`
+and `apt-get autoremove` resources provided for automated cleanup.
+
+License and Author
+==================
+
+Author:: Joshua Timberman (<joshua@opscode.com>)
+Author:: Matt Ray (<matt@opscode.com>)
+Author:: Seth Chisamore (<schisamo@opscode.com>)
+
+Copyright 2009-2013 Opscode, Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

data/cookbooks/apt/TESTING.md

@@ -0,0 +1,25 @@
+This cookbook includes support for running tests via Test Kitchen (1.0). This has some requirements.
+
+1. You must be using the Git repository, rather than the downloaded cookbook from the Chef Community Site.
+2. You must have Vagrant 1.1 installed.
+3. You must have a "sane" Ruby 1.9.3 environment.
+
+Once the above requirements are met, install the additional requirements:
+
+Install the berkshelf plugin for vagrant, and berkshelf to your local Ruby environment.
+
+    vagrant plugin install vagrant-berkshelf
+    gem install berkshelf
+
+Install Test Kitchen 1.0 (unreleased yet, use the alpha / prerelease version).
+
+    gem install test-kitchen --pre
+
+Install the Vagrant driver for Test Kitchen.
+
+    gem install kitchen-vagrant
+
+Once the above are installed, you should be able to run Test Kitchen:
+
+    kitchen list
+    kitchen test

data/cookbooks/apt/attributes/default.rb

@@ -0,0 +1,4 @@
+default['apt']['cacher-client']['restrict_environment'] = false
+default['apt']['cacher_port'] = 3142
+default['apt']['key_proxy'] = ''
+default['apt']['caching_server'] = false

data/cookbooks/apt/files/default/apt-proxy-v2.conf

@@ -0,0 +1,50 @@
+[DEFAULT]
+;; All times are in seconds, but you can add a suffix
+;; for minutes(m), hours(h) or days(d)
+
+;; commented out address so apt-proxy will listen on all IPs
+;; address = 127.0.0.1
+port = 9999
+cache_dir = /var/cache/apt-proxy
+
+;; Control files (Packages/Sources/Contents) refresh rate
+min_refresh_delay = 1s
+complete_clientless_downloads = 1
+
+;; Debugging settings.
+debug = all:4 db:0
+
+time = 30
+passive_ftp = on
+
+;;--------------------------------------------------------------
+;; Cache housekeeping
+
+cleanup_freq = 1d
+max_age = 120d
+max_versions = 3
+
+;;---------------------------------------------------------------
+;; Backend servers
+;;
+;; Place each server in its own [section]
+
+[ubuntu]
+; Ubuntu archive
+backends =
+        http://us.archive.ubuntu.com/ubuntu
+
+[ubuntu-security]
+; Ubuntu security updates
+backends = http://security.ubuntu.com/ubuntu
+
+[debian]
+;; Backend servers, in order of preference
+backends = 
+        http://debian.osuosl.org/debian/
+
+[security]
+;; Debian security archive
+backends = 
+        http://security.debian.org/debian-security
+        http://ftp2.de.debian.org/debian-security

data/cookbooks/apt/metadata.json

@@ -0,0 +1 @@
+{"name":"apt","description":"Configures apt and apt services and LWRPs for managing apt repositories and preferences","long_description":"Description\n===========\n\nThis cookbook includes recipes to execute apt-get update to ensure the\nlocal APT package cache is up to date. There are recipes for managing\nthe apt-cacher-ng caching proxy and proxy clients. It also includes a\nLWRP for managing APT repositories in /etc/apt/sources.list.d as well as\nan LWRP for pinning packages via /etc/apt/preferences.d.\n\nRequirements\n============\n\nVersion 2.0.0+ of this cookbook requires **Chef 11.0.0** or later.\n\nIf your Chef version is earlier than 11.0.0, use version 1.10.0 of\nthis cookbook.\n\nSee [COOK-2258](http://tickets.opscode.com/browse/COOK-2258) for more\ninformation on this requirement.\n\nVersion 1.8.2 to 1.10.0 of this cookbook requires **Chef 10.16.4** or\nlater.\n\nIf your Chef version is earlier than 10.16.4, use version 1.7.0 of\nthis cookbook.\n\nSee [CHEF-3493](http://tickets.opscode.com/browse/CHEF-3493) and\n[this code comment](http://bit.ly/VgvCgf) for more information on this\nrequirement.\n\n## Platform\n\n* Debian\n* Ubuntu\n\nMay work with or without modification on other Debian derivatives.\n\nRecipes\n=======\n\n## default\n\nThis recipe installs the `update-notifier-common` package to provide\nthe timestamp file used to only run `apt-get update` if the cache is\nmore than one day old.\n\nThis recipe should appear first in the run list of Debian or Ubuntu\nnodes to ensure that the package cache is up to date before managing\nany `package` resources with Chef.\n\nThis recipe also sets up a local cache directory for preseeding packages.\n\n## cacher-ng\n\nInstalls the `apt-cacher-ng` package and service so the system can\nprovide APT caching. You can check the usage report at\nhttp://{hostname}:3142/acng-report.html. The `cacher-ng` recipe\nincludes the `cacher-client` recipe, so it helps seed itself.\n\n## cacher-client\n\nConfigures the node to use the `apt-cacher-ng` server as a client. If you\nwant to restrict your node to using the `apt-cacher-ng` server in your\nEnvironment, set `['apt']['cacher-client']['restrict_environment']` to `true`.\n\nTo use a cacher server (or standard proxy server) not available via search\nset the atttribute `['apt']['cacher-ipaddress']` and for a custom port\nset `['apt']['cacher_port']`.\n\nResources/Providers\n===================\n\n## Managing repositories\n\nThis LWRP provides an easy way to manage additional APT repositories.\nAdding a new repository will notify running the `execute[apt-get-update]`\nresource immediately.\n\n### Actions\n\n- :add: creates a repository file and builds the repository listing\n- :remove: removes the repository file\n\n### Attribute Parameters\n\n- repo_name: name attribute. The name of the channel to discover\n- uri: the base of the Debian distribution\n- distribution: this is usually your release's codename...ie something\n  like `karmic`, `lucid` or `maverick`\n- components: package groupings..when it doubt use `main`\n- arch: constrain package to a particular arch like `i386`, `amd64` or\n  even `armhf` or `powerpc`. Defaults to nil.\n- deb_src: whether or not to add the repository as a source repo as\n  well - value can be `true` or `false`, default `false`.\n- keyserver: the GPG keyserver where the key for the repo should be retrieved\n- key: if a `keyserver` is provided, this is assumed to be the\n  fingerprint, otherwise it can be either the URI to the GPG key for\n  the repo, or a cookbook_file.\n- key_proxy: if set, pass the specified proxy via `http-proxy=` to GPG.\n- cookbook: if key should be a cookbook_file, specify a cookbook where\n  the key is located for files/default. Defaults to nil, so it will\n  use the cookbook where the resource is used.\n\n### Examples\n\n    # add the Zenoss repo\n    apt_repository \"zenoss\" do\n      uri \"http://dev.zenoss.org/deb\"\n      components [\"main\",\"stable\"]\n    end\n\n    # add the Nginx PPA; grab key from keyserver\n    apt_repository \"nginx-php\" do\n      uri \"http://ppa.launchpad.net/nginx/php5/ubuntu\"\n      distribution node['lsb']['codename']\n      components [\"main\"]\n      keyserver \"keyserver.ubuntu.com\"\n      key \"C300EE8C\"\n    end\n\n    # add the Nginx PPA; grab key from keyserver, also add source repo\n    apt_repository \"nginx-php\" do\n      uri \"http://ppa.launchpad.net/nginx/php5/ubuntu\"\n      distribution node['lsb']['codename']\n      components [\"main\"]\n      keyserver \"keyserver.ubuntu.com\"\n      key \"C300EE8C\"\n      deb_src true\n    end\n\n    # add the Cloudkick Repo\n    apt_repository \"cloudkick\" do\n      uri \"http://packages.cloudkick.com/ubuntu\"\n      distribution node['lsb']['codename']\n      components [\"main\"]\n      key \"http://packages.cloudkick.com/cloudkick.packages.key\"\n    end\n\n    # add the Cloudkick Repo with the key downloaded in the cookbook\n    apt_repository \"cloudkick\" do\n      uri \"http://packages.cloudkick.com/ubuntu\"\n      distribution node['lsb']['codename']\n      components [\"main\"]\n      key \"cloudkick.packages.key\"\n    end\n\n    # add the Cloudera Repo of CDH4 packages for Ubuntu 12.04 on AMD64\n    apt_repository \"cloudera\" do\n      uri \"http://archive.cloudera.com/cdh4/ubuntu/precise/amd64/cdh\"\n      arch \"amd64\"\n      distribution \"precise-cdh4\"\n      components [\"contrib\"]\n      key \"http://archive.cloudera.com/debian/archive.key\"\n    end\n\n    # remove Zenoss repo\n    apt_repository \"zenoss\" do\n      action :remove\n    end\n\n## Pinning packages\n\nThis LWRP provides an easy way to pin packages in /etc/apt/preferences.d.\nAlthough apt-pinning is quite helpful from time to time please note that Debian\ndoes not encourage its use without thorough consideration.\n\nFurther information regarding apt-pinning is available via\nhttp://wiki.debian.org/AptPreferences.\n\n### Actions\n\n- :add: creates a preferences file under /etc/apt/preferences.d\n- :remove: Removes the file, therefore unpin the package\n\n### Attribute Parameters\n\n- package_name: name attribute. The name of the package\n- glob: Pin by glob() expression or regexp surrounded by /.\n- pin: The package version/repository to pin\n- pin_priority: The pinning priority aka \"the highest package version wins\"\n\n### Examples\n\n    # Pin libmysqlclient16 to version 5.1.49-3\n    apt_preference \"libmysqlclient16\" do\n      pin \"version 5.1.49-3\"\n      pin_priority \"700\"\n    end\n\n    # Unpin libmysqlclient16\n    apt_preference \"libmysqlclient16\" do\n      action :remove\n    end\n\n    # Pin all packages from dotdeb.org\n    apt_preference \"dotdeb\" do\n      glob \"*\"\n      pin \"origin packages.dotdeb.org \"\n      pin_priority \"700\"\n    end\n\nUsage\n=====\n\nPut `recipe[apt]` first in the run list. If you have other recipes\nthat you want to use to configure how apt behaves, like new sources,\nnotify the execute resource to run, e.g.:\n\n    template \"/etc/apt/sources.list.d/my_apt_sources.list\" do\n      notifies :run, resources(:execute => \"apt-get update\"), :immediately\n    end\n\nThe above will run during execution phase since it is a normal\ntemplate resource, and should appear before other package resources\nthat need the sources in the template.\n\nPut `recipe[apt::cacher-ng]` in the run_list for a server to provide\nAPT caching and add `recipe[apt::cacher-client]` on the rest of the\nDebian-based nodes to take advantage of the caching server.\n\nIf you want to cleanup unused packages, there is also the `apt-get autoclean`\nand `apt-get autoremove` resources provided for automated cleanup.\n\nLicense and Author\n==================\n\nAuthor:: Joshua Timberman (<joshua@opscode.com>)\nAuthor:: Matt Ray (<matt@opscode.com>)\nAuthor:: Seth Chisamore (<schisamo@opscode.com>)\n\nCopyright 2009-2013 Opscode, Inc.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n","maintainer":"Opscode, Inc.","maintainer_email":"cookbooks@opscode.com","license":"Apache 2.0","platforms":{"ubuntu":">= 0.0.0","debian":">= 0.0.0"},"dependencies":{},"recommendations":{},"suggestions":{},"conflicting":{},"providing":{},"replacing":{},"attributes":{"apt/cacher-client/restrict_environment":{"description":"Whether to restrict the search for the caching server to the same environment as this node","default":"false","choice":[],"calculated":false,"type":"string","required":"optional","recipes":[]},"apt/cacher_port":{"description":"Default listen port for the caching server","default":"3142","choice":[],"calculated":false,"type":"string","required":"optional","recipes":[]},"apt/key_proxy":{"description":"Passed as the proxy passed to GPG for the apt_repository resource","default":"","choice":[],"calculated":false,"type":"string","required":"optional","recipes":[]},"apt/caching_server":{"description":"Set this to true if the node is a caching server","default":"false","choice":[],"calculated":false,"type":"string","required":"optional","recipes":[]}},"groupings":{},"recipes":{"apt":"Runs apt-get update during compile phase and sets up preseed directories","apt::cacher-ng":"Set up an apt-cacher-ng caching proxy","apt::cacher-client":"Client for the apt::cacher-ng caching proxy"},"version":"2.0.0"}

data/cookbooks/apt/metadata.rb

@@ -0,0 +1,30 @@
+name              "apt"
+maintainer        "Opscode, Inc."
+maintainer_email  "cookbooks@opscode.com"
+license           "Apache 2.0"
+description       "Configures apt and apt services and LWRPs for managing apt repositories and preferences"
+long_description  IO.read(File.join(File.dirname(__FILE__), 'README.md'))
+version           "2.0.0"
+recipe            "apt", "Runs apt-get update during compile phase and sets up preseed directories"
+recipe            "apt::cacher-ng", "Set up an apt-cacher-ng caching proxy"
+recipe            "apt::cacher-client", "Client for the apt::cacher-ng caching proxy"
+
+%w{ ubuntu debian }.each do |os|
+  supports os
+end
+
+attribute "apt/cacher-client/restrict_environment",
+  :description => "Whether to restrict the search for the caching server to the same environment as this node",
+  :default => "false"
+
+attribute "apt/cacher_port",
+  :description => "Default listen port for the caching server",
+  :default => "3142"
+
+attribute "apt/key_proxy",
+  :description => "Passed as the proxy passed to GPG for the apt_repository resource",
+  :default => ""
+
+attribute "apt/caching_server",
+  :description => "Set this to true if the node is a caching server",
+  :default => "false"

data/cookbooks/apt/providers/preference.rb

@@ -0,0 +1,61 @@
+#
+# Cookbook Name:: apt
+# Provider:: preference
+#
+# Copyright 2010-2011, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+# Build preferences.d file contents
+def build_pref(package_name, pin, pin_priority)
+  preference_content = "Package: #{package_name}\nPin: #{pin}\nPin-Priority: #{pin_priority}\n"
+end
+
+action :add do
+  new_resource.updated_by_last_action(false)
+
+  preference = build_pref(new_resource.glob || new_resource.package_name,
+                          new_resource.pin,
+                          new_resource.pin_priority)
+
+  preference_dir = directory "/etc/apt/preferences.d" do
+    owner "root"
+    group "root"
+    mode 00755
+    recursive true
+    action :nothing
+  end
+
+  preference_file = file "/etc/apt/preferences.d/#{new_resource.name}" do
+    owner "root"
+    group "root"
+    mode 00644
+    content preference
+    action :nothing
+  end
+
+  preference_dir.run_action(:create)
+  # write out the preference file, replace it if it already exists
+  preference_file.run_action(:create)
+end
+
+action :remove do
+  if ::File.exists?("/etc/apt/preferences.d/#{new_resource.name}")
+    Chef::Log.info "Un-pinning #{new_resource.name} from /etc/apt/preferences.d/"
+    file "/etc/apt/preferences.d/#{new_resource.name}" do
+      action :delete
+    end
+    new_resource.updated_by_last_action(true)
+  end
+end

data/cookbooks/apt/providers/repository.rb

@@ -0,0 +1,132 @@
+#
+# Cookbook Name:: apt
+# Provider:: repository
+#
+# Copyright 2010-2011, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+use_inline_resources
+
+def whyrun_supported?
+  true
+end
+
+# install apt key from keyserver
+def install_key_from_keyserver(key, keyserver)
+  execute "install-key #{key}" do
+    if !node['apt']['key_proxy'].empty?
+      command "apt-key adv --keyserver-options http-proxy=#{node['apt']['key_proxy']} --keyserver #{keyserver} --recv #{key}"
+    else
+      command "apt-key adv --keyserver #{keyserver} --recv #{key}"
+    end
+    action :run
+    not_if "apt-key list | grep #{key}"
+  end
+end
+
+# run command and extract gpg ids
+def extract_gpg_ids_from_cmd(cmd)
+  so = Mixlib::ShellOut.new(cmd)
+  so.run_command
+  so.stdout.split(/\n/).collect do |t|
+    if z = t.match(/^pub\s+\d+\w\/([0-9A-F]{8})/)
+      z[1]
+    end
+  end.compact
+end
+
+# install apt key from URI
+def install_key_from_uri(uri)
+  key_name = uri.split(/\//).last
+  cached_keyfile = "#{Chef::Config[:file_cache_path]}/#{key_name}"
+  if new_resource.key =~ /http/
+    remote_file cached_keyfile do
+      source new_resource.key
+      mode 00644
+      action :create
+    end
+  else
+    cookbook_file cached_keyfile do
+      source new_resource.key
+      cookbook new_resource.cookbook
+      mode 00644
+      action :create
+    end
+  end
+
+  execute "install-key #{key_name}" do
+    command "apt-key add #{cached_keyfile}"
+    action :run
+    not_if do
+      installed_ids = extract_gpg_ids_from_cmd("apt-key finger")
+      key_ids = extract_gpg_ids_from_cmd("gpg --with-fingerprint #{cached_keyfile}")
+      (installed_ids & key_ids).sort == key_ids.sort
+    end
+  end
+end
+
+# build repo file contents
+def build_repo(uri, distribution, components, arch, add_deb_src)
+  components = components.join(' ') if components.respond_to?(:join)
+  repo_info = "#{uri} #{distribution} #{components}\n"
+  repo_info = "[arch=#{arch}] #{repo_info}" if arch
+  repo =  "deb     #{repo_info}"
+  repo << "deb-src #{repo_info}" if add_deb_src
+  repo
+end
+
+action :add do
+  # add key
+  if new_resource.keyserver && new_resource.key
+    install_key_from_keyserver(new_resource.key, new_resource.keyserver)
+  elsif new_resource.key
+    install_key_from_uri(new_resource.key)
+  end
+
+  file "/var/lib/apt/periodic/update-success-stamp" do
+    action :nothing
+  end
+
+  execute "apt-get update" do
+    ignore_failure true
+    action :nothing
+  end
+
+  # build repo file
+  repository = build_repo(new_resource.uri,
+                          new_resource.distribution,
+                          new_resource.components,
+                          new_resource.arch,
+                          new_resource.deb_src)
+
+  file "/etc/apt/sources.list.d/#{new_resource.name}.list" do
+    owner "root"
+    group "root"
+    mode 00644
+    content repository
+    action :create
+    notifies :delete, "file[/var/lib/apt/periodic/update-success-stamp]", :immediately
+    notifies :run, "execute[apt-get update]", :immediately if new_resource.cache_rebuild
+  end
+end
+
+action :remove do
+  if ::File.exists?("/etc/apt/sources.list.d/#{new_resource.name}.list")
+    Chef::Log.info "Removing #{new_resource.name} repository from /etc/apt/sources.list.d/"
+    file "/etc/apt/sources.list.d/#{new_resource.name}.list" do
+      action :delete
+    end
+  end
+end