andyh-deprec 1.99.26

data/lib/deprec/recipes/mysql.rb

@@ -0,0 +1,115 @@
+# Copyright 2006-2008 by Mike Bailey. All rights reserved.
+Capistrano::Configuration.instance(:must_exist).load do 
+  namespace :deprec do
+    namespace :mysql do
+      
+      # Installation
+      
+      desc "Install mysql"
+      task :install do
+        install_deps
+        symlink_mysql_sockfile # XXX still needed?
+      end
+      
+      # Install dependencies for Mysql
+      task :install_deps do
+        apt.install( {:base => %w(mysql-server mysql-client)}, :stable )
+      end
+      
+      task :symlink_mysql_sockfile, :roles => :db do
+        # rails puts "socket: /tmp/mysql.sock" into config/database.yml
+        # this is not the location for our ubuntu's mysql socket file
+        # so we create this link to make deployment using rails defaults simpler
+        sudo "ln -sf /var/run/mysqld/mysqld.sock /tmp/mysql.sock"
+      end
+      
+      # Configuration
+      
+      SYSTEM_CONFIG_FILES[:mysql] = [
+        
+        {:template => "my.cnf.erb",
+         :path => '/etc/mysql/my.cnf',
+         :mode => 0644,
+         :owner => 'root:root'}
+      ]
+      
+      desc "Generate configuration file(s) for mysql from template(s)"
+      task :config_gen do
+        SYSTEM_CONFIG_FILES[:mysql].each do |file|
+          deprec2.render_template(:mysql, file)
+        end
+      end
+      
+      desc "Push mysql config files to server"
+      task :config, :roles => :db do
+        deprec2.push_configs(:mysql, SYSTEM_CONFIG_FILES[:mysql])
+      end
+      
+      task :activate, :roles => :db do
+        send(run_method, "update-rc.d mysql defaults")
+      end  
+      
+      task :deactivate, :roles => :db do
+        send(run_method, "update-rc.d -f mysql remove")
+      end
+      
+      # Control
+      
+      desc "Start Mysql"
+      task :start, :roles => :db do
+        send(run_method, "/etc/init.d/mysql start")
+      end
+      
+      desc "Stop Mysql"
+      task :stop, :roles => :db do
+        send(run_method, "/etc/init.d/mysql stop")
+      end
+      
+      desc "Restart Mysql"
+      task :restart, :roles => :db do
+        send(run_method, "/etc/init.d/mysql restart")
+      end
+      
+      desc "Reload Mysql"
+      task :reload, :roles => :db do
+        send(run_method, "/etc/init.d/mysql reload")
+      end
+      
+      
+      task :backup, :roles => :db do
+      end
+      
+      task :restore, :roles => :db do
+      end
+            
+    end
+  end
+end
+
+#
+# Setup replication
+#
+
+# setup user for repl
+# GRANT REPLICATION SLAVE ON *.* TO 'repl'@'%.yourdomain.com' IDENTIFIED BY 'slavepass';
+
+# get current position of binlog
+# mysql> FLUSH TABLES WITH READ LOCK;
+# Query OK, 0 rows affected (0.00 sec)
+# 
+# mysql> SHOW MASTER STATUS;
+# +------------------+----------+--------------+------------------+
+# | File             | Position | Binlog_Do_DB | Binlog_Ignore_DB |
+# +------------------+----------+--------------+------------------+
+# | mysql-bin.000012 |      296 |              |                  | 
+# +------------------+----------+--------------+------------------+
+# 1 row in set (0.00 sec)
+# 
+# # get current data
+# mysqldump --all-databases --master-data >dbdump.db
+# 
+# UNLOCK TABLES;
+
+
+# Replication Features and Issues
+# http://dev.mysql.com/doc/refman/5.0/en/replication-features.html

data/lib/deprec/recipes/nagios.rb

@@ -0,0 +1,305 @@
+# Copyright 2006-2008 by Mike Bailey. All rights reserved.
+Capistrano::Configuration.instance(:must_exist).load do 
+  namespace :deprec do
+    namespace :nagios do
+      
+      set :nagios_user, 'nagios'
+      set :nagios_group, 'nagios'
+      set(:nagios_host) { Capistrano::CLI.ui.ask "Enter hostname of nagios server" }
+      set :nagios_cmd_group, 'nagcmd' # Allow external commands to be submitted through the web interface
+      default :application, 'nagios' 
+      
+      SRC_PACKAGES[:nagios] = {
+        :url => "http://internap.dl.sourceforge.net/sourceforge/nagios/nagios-3.0.2.tar.gz",
+        :md5sum => "008d71aac08660bc007f7130ea82ab80  nagios-3.0.2.tar.gz", 
+        :configure => %w(
+          ./configure 
+          --with-command-group=nagcmd
+          ;
+          ).reject{|arg| arg.match '#'}.join(' '),
+        :make => 'make all;',
+        :install => 'make install install-init install-commandmode'
+      }
+      
+      desc "Install nagios"
+      task :install do
+        install_deps
+        create_nagios_user
+        deprec2.add_user_to_group(nagios_user, apache_user)
+        deprec2.mkdir('/usr/local/nagios/etc', :owner => "#{nagios_user}.#{nagios_group}", :via => :sudo)
+        deprec2.mkdir('/usr/local/nagios/objects', :owner => "#{nagios_user}.#{nagios_group}", :via => :sudo)
+        deprec2.download_src(SRC_PACKAGES[:nagios], src_dir)
+        deprec2.install_from_src(SRC_PACKAGES[:nagios], src_dir)
+        activate
+      end
+      
+      task :create_nagios_user do
+        deprec2.groupadd(nagios_group)
+        deprec2.useradd(nagios_user, :group => nagios_group, :homedir => false)
+        deprec2.groupadd(nagios_cmd_group)
+        deprec2.add_user_to_group(nagios_user, nagios_cmd_group)
+        # Add apache user to nagios group to permit commands via web interface
+        deprec2.add_user_to_group(apache_user, nagios_cmd_group)
+      end
+         
+      # Install dependencies for nagios
+      task :install_deps do
+        apt.install( {:base => %w(mailx)}, :stable )
+      end
+      
+      SYSTEM_CONFIG_FILES[:nagios] = [
+        
+        {:template => 'nagios.cfg.erb',
+        :path => '/usr/local/nagios/etc/nagios.cfg',
+        :mode => 0664,
+        :owner => 'nagios:nagios'},
+
+        {:template => 'resource.cfg.erb',
+        :path => '/usr/local/nagios/etc/resource.cfg',
+        :mode => 0660,
+        :owner => 'nagios:nagios'},
+        
+        {:template => 'cgi.cfg.erb',
+        :path => '/usr/local/nagios/etc/cgi.cfg',
+        :mode => 0664,
+        :owner => 'nagios:nagios'},
+
+        {:template => 'htpasswd.users',
+        :path => '/usr/local/nagios/etc/htpasswd.users',
+        :mode => 0664,
+        :owner => 'nagios:nagios'},
+
+        {:template => 'templates.cfg.erb',
+        :path => '/usr/local/nagios/etc/objects/templates.cfg',
+        :mode => 0664,
+        :owner => 'nagios:nagios'},
+        
+        {:template => 'commands.cfg.erb',
+        :path => '/usr/local/nagios/etc/objects/commands.cfg',
+        :mode => 0664,
+        :owner => 'nagios:nagios'},
+        
+        {:template => 'timeperiods.cfg.erb',
+        :path => '/usr/local/nagios/etc/objects/timeperiods.cfg',
+        :mode => 0664,
+        :owner => 'nagios:nagios'},
+        
+        {:template => 'localhost.cfg.erb',
+        :path => '/usr/local/nagios/etc/objects/localhost.cfg',
+        :mode => 0664,
+        :owner => 'nagios:nagios'},
+        
+        {:template => 'contacts.cfg.erb',
+        :path => '/usr/local/nagios/etc/objects/contacts.cfg',
+        :mode => 0664,
+        :owner => 'nagios:nagios'},
+        
+        {:template => 'hosts.cfg.erb',
+        :path => '/usr/local/nagios/etc/objects/hosts.cfg',
+        :mode => 0664,
+        :owner => 'nagios:nagios'},
+        
+        {:template => 'services.cfg.erb',
+        :path => '/usr/local/nagios/etc/objects/services.cfg',
+        :mode => 0664,
+        :owner => 'nagios:nagios'},
+        
+        {:template => 'localhost.cfg.erb',
+        :path => '/usr/local/nagios/etc/objects/localhost.cfg',
+        :mode => 0664,
+        :owner => 'nagios:nagios'},
+        
+        {:template => 'nagios_apache_vhost.conf.erb',
+         :path => "conf/nagios_apache_vhost.conf",
+         :mode => 0644,
+         :owner => 'root:root'}
+      
+      ]
+
+      desc "Generate configuration file(s) for nagios from template(s)"
+      task :config_gen do
+        SYSTEM_CONFIG_FILES[:nagios].each do |file|
+          deprec2.render_template(:nagios, file)
+        end
+      end
+      
+      desc "Push nagios config files to server"
+      task :config, :roles => :nagios do
+        set :application, 'nagios'
+        deprec2.push_configs(:nagios, SYSTEM_CONFIG_FILES[:nagios])
+        sudo "ln -sf #{deploy_to}/nagios/conf/nagios_apache_vhost.conf /usr/local/apache2/conf/apps"
+        config_check
+        restart
+      end
+      
+      desc "Run Nagios config check"
+      task :config_check, :roles => :nagios do
+        send(run_method, "/usr/local/nagios/bin/nagios -v /usr/local/nagios/etc/nagios.cfg")
+      end
+      
+      desc "Set Nagios to start on boot"
+      task :activate, :roles => :nagios do
+        send(run_method, "update-rc.d nagios defaults")
+        sudo "ln -sf #{deploy_to}/nagios/conf/nagios_apache_vhost.conf /usr/local/apache2/conf/apps"
+      end
+      
+      desc "Set Nagios to not start on boot"
+      task :deactivate, :roles => :nagios do
+        send(run_method, "update-rc.d -f nagios remove")
+        link = "#{apache_vhost_dir}/nagios_#{application}.conf"
+        sudo "test -h #{link} && sudo unlink #{link} || true"
+      end
+      
+      # Control
+
+      desc "Start Nagios"
+      task :start, :roles => :nagios do
+        send(run_method, "/etc/init.d/nagios start")
+      end
+
+      desc "Stop Nagios"
+      task :stop, :roles => :nagios do
+        send(run_method, "/etc/init.d/nagios stop")
+      end
+
+      desc "Restart Nagios"
+      task :restart, :roles => :nagios do
+        send(run_method, "/etc/init.d/nagios restart")
+      end
+
+      desc "Reload Nagios"
+      task :reload, :roles => :nagios do
+        send(run_method, "/etc/init.d/nagios reload")
+      end
+      
+      task :backup, :roles => :web do
+        # not yet implemented
+      end
+      
+      task :restore, :roles => :web do
+        # not yet implemented
+      end
+      
+      #
+      # Service specific tasks
+      #
+      
+      # XXX quick and dirty - clean up later
+      desc "Grant a user access to the web interface"
+      task :htpass, :roles => :nagios do
+        target_user = Capistrano::CLI.ui.ask "Userid" do |q|
+          q.default = 'nagiosadmin'
+        end
+        system "htpasswd config/nagios/usr/local/nagios/etc/htpasswd.users #{target_user}"
+      end
+    
+    end
+    
+    SRC_PACKAGES[:nagios_plugins] = {
+      :url => "http://downloads.sourceforge.net/nagiosplug/nagios-plugins-1.4.12.tar.gz",
+      :md5sum => "af68d00bbe2c39de02803d23e5eecca3  nagios-plugins-1.4.12.tar.gz", 
+      :configure => "./configure --with-nagios-user=#{nagios_user} --with-nagios-group=#{nagios_group};",
+    }   
+          
+    namespace :nagios_plugins do
+    
+      desc "Install nagios plugins"
+      task :install do
+        install_deps
+        top.deprec.nagios.create_nagios_user
+        deprec2.download_src(SRC_PACKAGES[:nagios_plugins], src_dir)
+        deprec2.install_from_src(SRC_PACKAGES[:nagios_plugins], src_dir)        
+      end
+      
+      # Install dependencies for nagios plugins
+      task :install_deps do
+        apt.install( {:base => %w(libmysqlclient15-dev)}, :stable )
+      end
+      
+      
+    end
+    
+
+    namespace :nrpe do
+      
+      default :nrpe_enable_command_args, false # set to true to compile nrpe to accept arguments
+	                                       # note that you'll need to set it before these recipes are loaded (e.g. in .caprc)
+      
+      SRC_PACKAGES[:nrpe] = {
+        :url => "http://downloads.sourceforge.net/nagios/nrpe-2.12.tar.gz",
+        :md5sum => "b2d75e2962f1e3151ef58794d60c9e97  nrpe-2.12.tar.gz", 
+        :configure => "./configure --with-nagios-user=#{nagios_user} --with-nagios-group=#{nagios_group} #{ '--enable-command-args' if nrpe_enable_command_args};",
+        :make => 'make all;',
+        :install => 'make install-plugin; make install-daemon; make install-daemon-config;'
+      }
+    
+      desc 'Install NRPE'
+      task :install do
+        install_deps
+        top.deprec.nagios.create_nagios_user
+        deprec2.download_src(SRC_PACKAGES[:nrpe], src_dir)
+        deprec2.install_from_src(SRC_PACKAGES[:nrpe], src_dir)
+        # XXX this should only be run on the nrpe clients
+        # XXX currently it's run on the nagios server too 
+        # XXX shouldn't do any harm but we should split them up later 
+        deprec2.append_to_file_if_missing('/etc/services', 'nrpe            5666/tcp # NRPE')    
+      end
+      
+      task :install_deps do
+        apt.install( {:base => %w(xinetd libssl-dev openssl)}, :stable )
+      end
+      
+      SYSTEM_CONFIG_FILES[:nrpe] = [
+        
+        {:template => 'nrpe.xinetd.erb',
+         :path => "/etc/xinetd.d/nrpe",
+         :mode => 0644,
+         :owner => 'root:root'},
+         
+        {:template => 'nrpe.cfg.erb',
+         :path => "/usr/local/nagios/etc/nrpe.cfg",
+         :mode => 0644,
+         :owner => 'nagios:nagios'}, # XXX hard coded file owner is bad...
+                                    # It's done here because we aren't using 
+                                    # lazy eval in hash constant.
+        {:template => "check_mongrel_cluster.rb",
+         :path => '/usr/local/nagios/libexec/check_mongrel_cluster.rb',
+         :mode => 0755,
+         :owner => 'root:root'},
+         
+         {:template => "check_linux_free_memory.pl",
+          :path => '/usr/local/nagios/libexec/check_linux_free_memory.pl',
+          :mode => 0755,
+          :owner => 'root:root'}
+      
+      ]
+      
+      desc "Generate configuration file(s) for nrpe from template(s)"
+      task :config_gen do
+        SYSTEM_CONFIG_FILES[:nrpe].each do |file|
+          deprec2.render_template(:nagios, file)
+        end
+      end
+      
+      desc "Push nrpe config files to server"
+      task :config do
+        deprec2.push_configs(:nagios, SYSTEM_CONFIG_FILES[:nrpe])
+        # XXX should really only do this on targets
+        sudo "/etc/init.d/xinetd stop"  
+        sudo "/etc/init.d/xinetd start"  
+      end
+      
+      task :test_local do
+        run "/usr/local/nagios/libexec/check_nrpe -H localhost"
+      end
+      
+      task :test_remote, :roles => :nagios do
+        target_host = Capistrano::CLI.ui.ask "target hostname"
+        run "/usr/local/nagios/libexec/check_nrpe -H #{target_host}"
+      end
+  
+    end
+      
+    
+  end
+end

data/lib/deprec/recipes/network.rb

@@ -0,0 +1,81 @@
+# Copyright 2006-2008 by Mike Bailey. All rights reserved.
+Capistrano::Configuration.instance(:must_exist).load do 
+  namespace :deprec do
+    namespace :network do
+            
+      set(:network_number_of_ports) { 
+        Capistrano::CLI.ui.ask "Number of network ports" do |q|
+          q.default = 1
+        end 
+      }
+      
+      set(:network_interfaces) {
+        foo = {}
+        network_number_of_ports.to_i.times do |port|
+          foo[port] = {}
+          foo[port][:address] = Capistrano::CLI.ui.ask "address" do |q|
+            q.default = "192.168.#{port+1}.10"
+          end
+          foo[port][:netmask] = Capistrano::CLI.ui.ask "netmask" do |q|
+            q.default = '255.255.255.0'
+          end
+          foo[port][:broadcast] = Capistrano::CLI.ui.ask "broadcast" do |q|
+            q.default = "192.168.#{port+1}.255"
+          end
+
+        end
+        foo
+      }
+      set(:network_hostname) { 
+        Capistrano::CLI.ui.ask "hostname" do |q|
+          # q.validate = /add hostname validation here/
+        end 
+      } 
+      set(:network_gateway) { 
+        Capistrano::CLI.ui.ask "default gateway" do |q|
+          q.default = '192.168.1.1'
+        end 
+      }
+      set(:network_dns_nameservers) { 
+        Capistrano::CLI.ui.ask "dns nameservers (separated by spaces)" do |q|
+          q.default = '203.8.183.1 4.2.2.1'
+        end 
+      }
+      
+      SYSTEM_CONFIG_FILES[:network] = [
+
+        {:template => "interfaces.erb",
+          :path => '/etc/network/interfaces',
+          :mode => 0644,
+          :owner => 'root:root'},
+
+        {:template => "hosts.erb",
+         :path => '/etc/hosts',
+         :mode => 0644,
+         :owner => 'root:root'},
+
+        {:template => "hostname.erb",
+         :path => '/etc/hostname',
+         :mode => 0644,
+         :owner => 'root:root'}
+    
+       ]
+       
+      # XXX need to set the order for these as it breaks sudo currently
+      desc "Update system networking configuration"
+      task :config do
+        SYSTEM_CONFIG_FILES[:network].each do |file|
+          deprec2.render_template(:network, file.merge(:remote=>true))
+        end
+      end
+      
+      desc "Restart network interface"
+      task :restart do
+        sudo '/etc/init.d/networking restart'
+      end
+      
+      
+    end
+  end
+  
+end

data/lib/deprec/recipes/nginx.rb

@@ -0,0 +1,144 @@
+# Copyright 2006-2008 by Mike Bailey. All rights reserved.
+Capistrano::Configuration.instance(:must_exist).load do 
+  namespace :deprec do 
+    namespace :nginx do
+
+      set :nginx_server_name, nil
+      set :nginx_user,  'nginx'
+      set :nginx_group, 'nginx'
+      set :nginx_vhost_dir, '/usr/local/nginx/conf/vhosts'
+      set :nginx_client_max_body_size, '100M'
+      set :nginx_worker_processes, 4
+
+      SRC_PACKAGES[:nginx] = {
+        :url => "http://sysoev.ru/nginx/nginx-0.5.34.tar.gz",
+        :md5sum => "8f7d3efcd7caaf1f06e4d95dfaeac238  nginx-0.5.34.tar.gz",
+        :configure => './configure --sbin-path=/usr/local/sbin --with-http_ssl_module;'
+      }
+
+      desc "Install nginx"
+      task :install do
+        install_deps
+        deprec2.download_src(SRC_PACKAGES[:nginx], src_dir)
+        deprec2.install_from_src(SRC_PACKAGES[:nginx], src_dir)
+        create_nginx_user
+        # install_index_page  # XXX not done yet
+        SYSTEM_CONFIG_FILES[:nginx].each do |file|
+          deprec2.render_template(:nginx, file.merge(:remote => true))
+        end
+        activate
+      end
+
+      # install dependencies for nginx
+      task :install_deps do
+        apt.install( {:base => %w(libpcre3 libpcre3-dev libpcrecpp0 libssl-dev zlib1g-dev)}, :stable )
+        # do we need libgcrypt11-dev?
+      end
+
+      task :create_nginx_user do
+        deprec2.groupadd(nginx_group)
+        deprec2.useradd(nginx_user, :group => nginx_group, :homedir => false)
+      end
+      
+      task :rename_index_page, :roles => :web do
+        index_file = '/usr/local/nginx/html/index.html'
+        sudo "test -f #{index_file} && sudo mv #{index_file} #{index_file}.orig || exit 0"
+      end
+
+      SYSTEM_CONFIG_FILES[:nginx] = [
+
+        {:template => 'nginx-init-script',
+          :path => '/etc/init.d/nginx',
+          :mode => 0755,
+          :owner => 'root:root'},
+
+        {:template => 'nginx.conf.erb',
+          :path => "/usr/local/nginx/conf/nginx.conf",
+          :mode => 0644,
+          :owner => 'root:root'},
+
+        {:template => 'mime.types.erb',
+          :path => "/usr/local/nginx/conf/mime.types",
+          :mode => 0644,
+          :owner => 'root:root'},
+
+        {:template => 'nothing.conf',
+          :path => "/usr/local/nginx/conf/vhosts/nothing.conf",
+          :mode => 0644,
+          :owner => 'root:root'}
+      ]
+
+      desc <<-DESC
+      Generate nginx config from template. Note that this does not
+      push the config to the server, it merely generates required
+      configuration files. These should be kept under source control.            
+      The can be pushed to the server with the :config task.
+      DESC
+      task :config_gen do
+        SYSTEM_CONFIG_FILES[:nginx].each do |file|
+          deprec2.render_template(:nginx, file)
+        end
+      end
+
+      desc "Push nginx config files to server"
+      task :config, :roles => :web do
+        deprec2.push_configs(:nginx, SYSTEM_CONFIG_FILES[:nginx])
+      end
+
+      desc <<-DESC
+      Activate nginx start scripts on server.
+      Setup server to start nginx on boot.
+      DESC
+      task :activate do
+        activate_system
+      end
+
+      task :activate_system do
+        send(run_method, "update-rc.d nginx defaults")
+      end
+
+      desc <<-DESC
+      Dectivate nginx start scripts on server.
+      Setup server to start nginx on boot.
+      DESC
+      task :deactivate do
+        send(run_method, "update-rc.d -f nginx remove")
+      end
+
+
+      # Control
+
+      desc "Start Nginx"
+      task :start, :roles => :web do
+        send(run_method, "/etc/init.d/nginx start")
+      end
+
+      desc "Stop Nginx"
+      task :stop, :roles => :web do
+        send(run_method, "/etc/init.d/nginx stop")
+      end
+
+      desc "Restart Nginx"
+      task :restart, :roles => :web do
+        # So that restart will work even if nginx is not running
+        # we call stop and ignore the return code. We then start it.
+        send(run_method, "/etc/init.d/nginx stop; exit 0")
+        send(run_method, "/etc/init.d/nginx start")
+      end
+
+      desc "Reload Nginx"
+      task :reload, :roles => :web do
+        send(run_method, "/etc/init.d/nginx reload")
+      end
+
+      task :backup, :roles => :web do
+        # there's nothing to backup for nginx
+      end
+
+      task :restore, :roles => :web do
+        # there's nothing to store for nginx
+      end
+
+    end 
+  end
+end