beaker-pe 2.11.16 → 2.11.19

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 52adaf3c402a17eead36d731fb3f999b86abef884cec5cc575e481ac8e3e8c9f
-  data.tar.gz: fc2acec40bf906655511f3c918345f3a425ac5bd98dc522791e912d8a0dc166a
+  metadata.gz: 72a086021092d8858a631836bf5748c9af05c634aaf8f592779f5dd410754297
+  data.tar.gz: d6550eea50d3e8e0dc8a5d2370ba01ba3b90195a49ede9254e5842c91d15863e
 SHA512:
-  metadata.gz: 1d6a1cd59d1d3f3e9a00e363c60b9703b526bf77dcda4523ad830bd654ef02d9187c80f50828c913d51ba247da14fca0f2c8e0c5af2530f534c07fe6ad40925a
-  data.tar.gz: 1dbbd8949c123c925cebcee3c82aee46a924433a9c829887e45916bdd040fb65e6e944e7ad8a2f6a5f384a49105597d809834b6262dffc25cc734a6b931b3bb1
+  metadata.gz: a074dd641c52eda075571a15c4d3370f2111af27b2c776d4b68d9d236a6c4bee2a702531c062907b2f51a0d48133001065e9b94bda155e4e7a0376b46010c4d2
+  data.tar.gz: 73a32f29d7a216d9de17e2175b6b77e8938ac414bbcbe1292195069f83274b1649bf79f24634e4526930c0297bea240f1292dc169da9a6b3efd5fe11ccdf95bf

data/.github/workflows/snyk_merge.yaml

@@ -0,0 +1,30 @@
+---
+name: Snyk Scan
+on: push
+
+# Note: if your workflow involves working from branches
+# on the puppetlabs repos directly rather from a fork
+# you will probably want to use the below for events to
+# reduce the reporting noise.
+# on:
+#   push:
+#     branches:
+#       - main
+
+jobs:
+  security:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@master
+      - name: setup ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: 2.7
+      - name: create lock
+        run: bundle lock
+      - name: Run Snyk to check for vulnerabilities
+        uses: snyk/actions/ruby@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_FOSS_KEY }}
+        with:
+          command: monitor

data/CODEOWNERS

@@ -1,5 +1,5 @@
 #This Repository is maintained by both the beaker, installer, and Night's Watch teams, depending on the location of the changes
-* @puppetlabs/beaker
+* @puppetlabs/dio
 /lib/beaker-pe/install @puppetlabs/installer-and-management
 /lib/beaker-pe/pe-client-tools @puppetlabs/night-s-watch
 /spec/beaker-pe/install @puppetlabs/installer-and-management

data/lib/beaker-pe/install/pe_utils.rb

@@ -209,7 +209,7 @@ module Beaker
               protocol_to_use = '[System.Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12'
             end
 
-            cmd = %Q{powershell -c "cd #{host['working_dir']};#{protocol_to_use};#{cert_validator};\\$webClient = New-Object System.Net.WebClient;\\$webClient.DownloadFile('https://#{downloadhost}:8140/packages/current/install.ps1', '#{host['working_dir']}/install.ps1');#{host['working_dir']}/install.ps1 -verbose #{frictionless_install_opts.join(' ')}"}
+            cmd = %Q{powershell -NoProfile -NonInteractive -NoLogo -ExecutionPolicy Bypass -c "cd #{host['working_dir']};#{protocol_to_use};#{cert_validator};\\$webClient = New-Object System.Net.WebClient;\\$webClient.DownloadFile('https://#{downloadhost}:8140/packages/current/install.ps1', '#{host['working_dir']}/install.ps1');#{host['working_dir']}/install.ps1 -verbose #{frictionless_install_opts.join(' ')}"}
           else
             curl_opts = %w{-O}
             if version_is_less(pe_version, '2019.1.0') || require_tlsv1?(host)
@@ -258,6 +258,9 @@ module Beaker
               pe_cmd += " -y"
             end
 
+            configure_flags = host['configure_flags'] || opts[:configure_flags]
+            pe_cmd += " -- #{configure_flags}" if configure_flags
+
             # If we are doing an upgrade from 2016.2.0,
             # we can assume there will be a valid pe.conf in /etc that we can re-use.
             # We also expect that any custom_answers specified to beaker have been
@@ -884,6 +887,7 @@ module Beaker
           end
 
           install_hosts.each do |host|
+            solaris_key_chain_fix
 
             if agent_only_check_needed && hosts_agent_only.include?(host) || install_via_msi?(host)
               host['type'] = 'aio'
@@ -1332,6 +1336,60 @@ module Beaker
           answers
         end
 
+        # If installing older versions of solaris, make sure the DigiCert cert is added to the keychain
+        def solaris_key_chain_fix
+digicert = <<-EOM
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+EOM
+          hosts.each do |host|
+            if host.platform=~ /solaris-11(\.2)?-(i386|sparc)/
+              create_remote_file(host, "DigiCertTrustedRootG4.crt.pem", digicert)
+              on(host, 'chmod a+r /root/DigiCertTrustedRootG4.crt.pem')
+              on(host, 'cp -p /root/DigiCertTrustedRootG4.crt.pem /etc/certs/CA/')
+              on(host, 'rm /root/DigiCertTrustedRootG4.crt.pem')
+              on(host, '/usr/sbin/svcadm restart /system/ca-certificates')
+              timeout = 60
+              counter = 0
+              while on(host, 'svcs -x ca-certificates').output !~ /State: online/ do
+                raise 'ca-certificates services failed start up' if counter > timeout
+                sleep 5
+                counter = counter + 5
+              end
+            end
+          end
+        end
+
         # Builds the agent_only and not_agent_only arrays needed for installation.
         #
         # @param [Array<Host>]          hosts hosts to split up into the arrays
@@ -2016,6 +2074,7 @@ module Beaker
         # @param [Array] agent only nodes from Beaker hosts
         # @param [Hash] opts The Beaker options hash
         def install_agents_only_on(agent_nodes, opts)
+          solaris_key_chain_fix
           unless agent_nodes.empty?
             configure_type_defaults_on(agent_nodes)
 

data/lib/beaker-pe/version.rb

@@ -3,7 +3,7 @@ module Beaker
     module PE
 
       module Version
-        STRING = '2.11.16'
+        STRING = '2.11.19'
       end
 
     end

data/spec/beaker-pe/install/pe_utils_spec.rb

@@ -272,7 +272,7 @@ describe ClassMixedWithDSLInstallUtils do
     it 'generates a PS1 frictionless install command for windows' do
       host['platform'] = 'windows-2012-64'
       protocol = ''
-      expecting = "powershell -c \"" +
+      expecting = "powershell -NoProfile -NonInteractive -NoLogo -ExecutionPolicy Bypass -c \"" +
                   [
                     "cd /tmp",
                     "#{protocol}",
@@ -290,7 +290,7 @@ describe ClassMixedWithDSLInstallUtils do
       host['puppetpath'] = '/PuppetLabs/puppet/etc'
       host['use_puppet_ca_cert'] = true
       protocol = ''
-      expecting = "powershell -c \"" +
+      expecting = "powershell -NoProfile -NonInteractive -NoLogo -ExecutionPolicy Bypass -c \"" +
       [
         "cd /tmp",
         "#{protocol}",
@@ -311,7 +311,7 @@ describe ClassMixedWithDSLInstallUtils do
     it 'generates a PS1 frictionless install command for windows with Tls12 protocol' do
       host['platform'] = 'windows-20012-64'
       protocol = '[System.Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12'
-      expecting = "powershell -c \"" +
+      expecting = "powershell -NoProfile -NonInteractive -NoLogo -ExecutionPolicy Bypass -c \"" +
                   [
                     "cd /tmp",
                     "#{protocol}",
@@ -327,7 +327,7 @@ describe ClassMixedWithDSLInstallUtils do
     it 'generates a PS1 frictionless install command for windows-2008 without Tls12 protocol' do
       host['platform'] = 'windows-2008-64'
       protocol = ''
-      expecting = "powershell -c \"" +
+      expecting = "powershell -NoProfile -NonInteractive -NoLogo -ExecutionPolicy Bypass -c \"" +
                   [
                     "cd /tmp",
                     "#{protocol}",

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: beaker-pe
 version: !ruby/object:Gem::Version
-  version: 2.11.16
+  version: 2.11.19
 platform: ruby
 authors:
 - Puppetlabs
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-08-21 00:00:00.000000000 Z
+date: 2022-07-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec
@@ -249,6 +249,7 @@ extensions: []
 extra_rdoc_files: []
 files:
 - ".github/dependabot.yml"
+- ".github/workflows/snyk_merge.yaml"
 - ".gitignore"
 - ".rspec"
 - ".simplecov"
@@ -307,7 +308,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.8
+rubygems_version: 3.0.9
 signing_key: 
 specification_version: 4
 summary: Beaker PE DSL Helpers!