app_maint 0.0.2 → 0.0.3

data/lib/app_maint/version.rb

@@ -1,3 +1,3 @@
 module AppMaint
-  VERSION = "0.0.2"
+  VERSION = "0.0.3"
 end

data/lib/recipes/_fix_permissons.rb

@@ -0,0 +1,10 @@
+Capistrano::Configuration.instance.load do
+  namespace :fix_permissions do
+    desc "Fix wrong permissions for apps directory"
+    task :setup, roles: :web do
+      run "#{sudo} chown -R #{user}:admin /home/#{user}/apps"
+    end
+
+    after "deploy:setup", "fix_permissions:setup"
+  end
+end

data/lib/recipes/base.rb

@@ -1,43 +1,101 @@
+def template(from, to)
+  erb = File.read(File.expand_path("../templates/#{from}", __FILE__))
+  put ERB.new(erb).result(binding), to
+end
+
 Capistrano::Configuration.instance.load do
   namespace :base do
     desc "Prepare system for deployment"
     task :setup do
       init_deploy_user
-      install
+      install_packages
+      install_ruby
+      pam_ssh_agent_auth
     end
-    
+
     desc "Init environment for deployment user"
     task :init_deploy_user do
       set :deploy_user, "#{user}"
       with_user "#{sudo_user}" do
         if capture( "#{sudo} cat /etc/passwd | grep #{deploy_user} | wc -l" ).to_i == 0
           run "#{sudo} addgroup admin"
-          run "#{sudo} useradd deployer -m -s /bin/bash -g admin"
+          run "#{sudo} useradd #{deploy_user} -m -s /bin/bash -g admin"
           upload "#{Dir.home}/.ssh/id_rsa.pub", "/tmp/id_rsa.pub"
           run "#{sudo} mkdir -p /home/#{deploy_user}/.ssh"
           run "echo \"cat /tmp/id_rsa.pub >> /home/#{deploy_user}/.ssh/authorized_keys\" | sudo -s"
           run "rm /tmp/id_rsa.pub"
+          run "#{sudo} chown -R #{deploy_user}:admin /home/#{deploy_user}"
         end
       end
     end
 
-    desc "Install minimum prerequisites for app_maint"
-    task :install do
+    desc "Installs the necessary OS packages"
+    task :install_packages do
+      with_user "#{sudo_user}" do
+        run "#{sudo} apt-get -y update 1>/dev/null"
+        run "#{sudo} apt-get -y install python-software-properties 1>/dev/null"
+        run "#{sudo} apt-get -y install curl git-core 1>/dev/null"
+        run "#{sudo} apt-get -y install build-essential zlib1g-dev libssl-dev libreadline6-dev libyaml-dev 1>/dev/null"
+        run "#{sudo} apt-get -y install libpam0g-dev checkinstall 1>/dev/null"
+      end
+    end
+
+    desc "Installs up-to-date ruby version from sources"
+    task :install_ruby do
+      version = (defined? ruby_version) ? ruby_version : '1.9.3'
+      patch = (defined? ruby_patch) ? ruby_patch : 'p362'
       with_user "#{sudo_user}" do
-        if capture( "which ruby  | wc -l" ).to_i == 0
-          run "#{sudo} apt-get -y update"
-          run "#{sudo} apt-get -y install python-software-properties"
-          run "#{sudo} apt-get -y install curl git-core"
-          run "#{sudo} apt-get -y install build-essential zlib1g-dev libssl-dev libreadline6-dev libyaml-dev"
-          run "wget ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p194.tar.gz"
-          run "tar -xvzf ruby-1.9.3-p194.tar.gz"
-          run "cd ruby-1.9.3-p194/ && ./configure --prefix=/usr/local && make && #{sudo} make install"
+        if capture( "dpkg --list ruby-#{version}#{patch} 2>&1 | grep 'No packages found' | wc -l" ).to_i == 1
+          run [
+            "wget ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-#{version}-#{patch}.tar.gz --quiet",
+            "tar -xzf ruby-#{version}-#{patch}.tar.gz",
+            "cd ruby-#{version}-#{patch}/",
+            "./configure --prefix=/usr/local 1>/dev/null",
+            "make 1>/dev/null 2>&1"
+          ].join( '&&' )
+          run [
+            "cd ruby-#{version}-#{patch}/",
+            "#{sudo} checkinstall --default --pkgname=ruby-#{version}#{patch} --pkgversion=#{version}#{patch} --nodoc 1>/dev/null 2>&1"
+          ].join( '&&' )
           run "#{sudo} gem install bundler --no-ri --no-rdoc"
-          run "#{sudo} gem install chef ruby-shadow --no-ri --no-rdoc"
+          run "#{sudo} gem install chef ruby-shadow right_aws --no-ri --no-rdoc"
           run "#{sudo} gem install server_maint --no-ri --no-rdoc"
         end
       end
     end
+
+    desc "Make shared keys and sudo work together"
+    task :pam_ssh_agent_auth do
+      version = (defined? pam_ssh_agent_auth_version) ? pam_ssh_agent_auth : '0.9.4'
+      with_user "#{sudo_user}" do
+        if capture( "dpkg --list pam-ssh-agent-auth-#{version} 2>&1 | grep 'No packages found' | wc -l" ).to_i == 1
+          run [
+            "wget http://downloads.sourceforge.net/project/pamsshagentauth/pam_ssh_agent_auth/v#{version}/pam_ssh_agent_auth-#{version}.tar.bz2 --quiet",
+            "tar -xjf pam_ssh_agent_auth-#{version}.tar.bz2",
+            "cd pam_ssh_agent_auth-#{version}",
+            "./configure --libexecdir=/lib/security --with-mantype=man 1>/dev/null",
+            "make 1>/dev/null 2>&1"
+          ].join( '&&' )
+          run [
+            "cd pam_ssh_agent_auth-#{version}",
+            "#{sudo} checkinstall --default --pkgname=pam_ssh_agent_auth-#{version} --nodoc 1>/dev/null 2>&1"
+          ].join( '&&' )
+          pam_config = [
+            '#%PAM-1.0',
+            'auth sufficient pam_ssh_agent_auth.so file=%h/.ssh/authorized_keys',
+            '@include common-account',
+            'session required pam_permit.so',
+            'session required pam_limits.so'
+          ].join( "\n" )
+          put(
+            pam_config,
+            "/tmp/pam_config"
+          )
+          run "#{sudo} mv /tmp/pam_config /etc/pam.d/sudo"
+        end
+      end
+    end
+
     before "deploy:setup", "base:setup"
   end
 end

data/lib/recipes/chef.rb

@@ -4,29 +4,36 @@ Capistrano::Configuration.instance.load do
   namespace :chef do
     desc "Manages all system dependencies for this application"
     task :manages, roles: :web do
-      run "mkdir -p /home/#{user}/apps/#{application}/shared/log"
-      chef_cookbook_path = 
+      run "mkdir -p /home/#{user}/chef/#{application}/log"
+      chef_cookbook_path =
         capture( %q{ruby -e 'require "server_maint"; puts ServerMaint::get_cookbook_path'} ).chomp
-      app_cookbook_path = "/home/#{user}/apps/#{application}/shared/cookbooks"
+      app_cookbook_path = "/home/#{user}/chef/#{application}/cookbooks"
       chef_config = [
         %Q(cookbook_path ["#{chef_cookbook_path}", File.expand_path("../cookbooks", __FILE__)]),
         %Q(json_attribs File.expand_path("../node.json", __FILE__))
       ].join( "\n" )
       put(
         chef_config,
-        "/home/#{user}/apps/#{application}/shared/solo.rb"
+        "/home/#{user}/chef/#{application}/solo.rb"
       )
-      node_config = { "run_list" => ["recipe[main]"] }.to_json
-      put node_config,  "/home/#{user}/apps/#{application}/shared/node.json"
+      node_config = {
+        "user" => "#{user}",
+        "application" => "#{application}",
+        "server_name" => "#{host_name}",
+        "run_list" => ["recipe[main]"]
+      }
+      node_config.update( app_node_config ) if defined? app_node_config
+      node_config.update( stage_node_config ) if defined? stage_node_config
+      put node_config.to_json,  "/home/#{user}/chef/#{application}/node.json"
       upload(
         "#{cookbooks}",
-        "/home/#{user}/apps/#{application}/shared/cookbooks",
+        "/home/#{user}/chef/#{application}",
         {:recursive => true, :via => :scp}
       )
       run [
-        "chef-solo",
-        "-c /home/#{user}/apps/#{application}/shared/solo.rb",
-        "-L /home/#{user}/apps/#{application}/shared/log/chef.log",
+        "#{sudo} chef-solo",
+        "-c /home/#{user}/chef/#{application}/solo.rb",
+        "-L /home/#{user}/chef/#{application}/log/chef.log",
         "1>/dev/null"
       ].join( ' ' )
     end

data/lib/recipes/git.rb

@@ -4,8 +4,12 @@ Capistrano::Configuration.instance.load do
     task :setup, roles: :web do
       run "mkdir -p /home/deployer/repos/#{application}.git"
       run "cd /home/deployer/repos/#{application}.git && git --bare init"
-      run_locally "git remote add #{remote} ssh://#{user}@#{host_name}/home/deployer/repos/#{application}.git"
+      run_locally "git init"
+      if `git config --get remote.#{remote}.url` == ''
+        run_locally "git remote add #{remote} ssh://#{user}@#{host_name}/home/deployer/repos/#{application}.git"
+      end
     end
+
     after "deploy:setup", "git:setup"
   end
 end

data/lib/recipes/templates/unicorn.rb.erb

@@ -0,0 +1,8 @@
+working_directory "<%= current_path %>"
+pid "<%= shared_path %>/pids/unicorn.pid"
+stderr_path "<%= shared_path %>/log/unicorn.log"
+stdout_path "<%= shared_path %>/log/unicorn.log"
+
+listen "/tmp/unicorn.<%= application %>.sock"
+worker_processes <%= unicorn_workers %>
+timeout 30

data/lib/recipes/templates/unicorn_init.erb

@@ -0,0 +1,84 @@
+#!/bin/sh
+### BEGIN INIT INFO
+# Provides:          unicorn
+# Required-Start:    $remote_fs $syslog
+# Required-Stop:     $remote_fs $syslog
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: Manage unicorn server
+# Description:       Start, stop, restart unicorn server for a specific application.
+### END INIT INFO
+set -e
+
+# Feel free to change any of the following variables for your app:
+TIMEOUT=${TIMEOUT-60}
+APP_ROOT=<%= current_path %>
+PID=<%= shared_path %>/pids/unicorn.pid
+CMD="cd <%= current_path %>; bundle exec unicorn -D -c <%= shared_path %>/config/unicorn.rb -E production"
+AS_USER=<%= user %>
+set -u
+
+OLD_PIN="$PID.oldbin"
+
+sig () {
+  test -s "$PID" && kill -$1 `cat $PID`
+}
+
+oldsig () {
+  test -s $OLD_PIN && kill -$1 `cat $OLD_PIN`
+}
+
+run () {
+  if [ "$(id -un)" = "$AS_USER" ]; then
+    eval $1
+  else
+    su -c "$1" - $AS_USER
+  fi
+}
+
+case "$1" in
+start)
+  sig 0 && echo >&2 "Already running" && exit 0
+  run "$CMD"
+  ;;
+stop)
+  sig QUIT && exit 0
+  echo >&2 "Not running"
+  ;;
+force-stop)
+  sig TERM && exit 0
+  echo >&2 "Not running"
+  ;;
+restart|reload)
+  sig HUP && echo reloaded OK && exit 0
+  echo >&2 "Couldn't reload, starting '$CMD' instead"
+  run "$CMD"
+  ;;
+upgrade)
+  if sig USR2 && sleep 2 && sig 0 && oldsig QUIT
+  then
+    n=$TIMEOUT
+    while test -s $OLD_PIN && test $n -ge 0
+    do
+      printf '.' && sleep 1 && n=$(( $n - 1 ))
+    done
+    echo
+
+    if test $n -lt 0 && test -s $OLD_PIN
+    then
+      echo >&2 "$OLD_PIN still exists after $TIMEOUT seconds"
+      exit 1
+    fi
+    exit 0
+  fi
+  echo >&2 "Couldn't upgrade, starting '$CMD' instead"
+  run "$CMD"
+  ;;
+reopen-logs)
+  sig USR1
+  ;;
+*)
+  echo >&2 "Usage: $0 <start|stop|restart|upgrade|force-stop|reopen-logs>"
+  exit 1
+  ;;
+esac

data/lib/recipes/unicorn.rb

@@ -0,0 +1,22 @@
+Capistrano::Configuration.instance.load do
+  namespace :unicorn do
+    desc "Setup Unicorn initializer and app configuration"
+    task :setup, roles: :app do
+      run "mkdir -p #{shared_path}/config"
+      template "unicorn.rb.erb", "#{shared_path}/config/unicorn.rb"
+      template "unicorn_init.erb", "/tmp/unicorn_init"
+      run "chmod +x /tmp/unicorn_init"
+      run "#{sudo} mv /tmp/unicorn_init /etc/init.d/unicorn_#{application}"
+      run "#{sudo} update-rc.d -f unicorn_#{application} defaults 1>/dev/null"
+    end
+    after "deploy:setup", "unicorn:setup"
+
+    %w[start stop restart].each do |command|
+      desc "#{command} unicorn"
+      task command, roles: :app do
+        run "service unicorn_#{application} #{command}"
+      end
+      after "deploy:#{command}", "unicorn:#{command}"
+    end
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: app_maint
 version: !ruby/object:Gem::Version
-  version: 0.0.2
+  version: 0.0.3
   prerelease: 
 platform: ruby
 authors:
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2012-10-23 00:00:00.000000000 Z
+date: 2013-01-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -89,9 +89,13 @@ files:
 - app_maint.gemspec
 - lib/app_maint.rb
 - lib/app_maint/version.rb
+- lib/recipes/_fix_permissons.rb
 - lib/recipes/base.rb
 - lib/recipes/chef.rb
 - lib/recipes/git.rb
+- lib/recipes/templates/unicorn.rb.erb
+- lib/recipes/templates/unicorn_init.erb
+- lib/recipes/unicorn.rb
 homepage: http://github.com/fdoebbelin/app_maint
 licenses: []
 post_install_message: 
@@ -106,7 +110,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '0'
       segments:
       - 0
-      hash: 202345415463774109
+      hash: -3945106699859961047
 required_rubygems_version: !ruby/object:Gem::Requirement
   none: false
   requirements:
@@ -115,10 +119,10 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
       segments:
       - 0
-      hash: 202345415463774109
+      hash: -3945106699859961047
 requirements: []
 rubyforge_project: 
-rubygems_version: 1.8.23
+rubygems_version: 1.8.24
 signing_key: 
 specification_version: 3
 summary: Application maintenance with capistrano