bebox 0.0.1

data/lib/templates/puppet/step-0/modules/stdlib/lib/puppet/provider/file_line/ruby.rb

@@ -0,0 +1,83 @@
+Puppet::Type.type(:file_line).provide(:ruby) do
+  def exists?
+    lines.find do |line|
+      line.chomp == resource[:line].chomp
+    end
+  end
+
+  def create
+    if resource[:match]
+      handle_create_with_match
+    elsif resource[:after]
+      handle_create_with_after
+    else
+      append_line
+    end
+  end
+
+  def destroy
+    local_lines = lines
+    File.open(resource[:path],'w') do |fh|
+      fh.write(local_lines.reject{|l| l.chomp == resource[:line] }.join(''))
+    end
+  end
+
+  private
+  def lines
+    # If this type is ever used with very large files, we should
+    #  write this in a different way, using a temp
+    #  file; for now assuming that this type is only used on
+    #  small-ish config files that can fit into memory without
+    #  too much trouble.
+    @lines ||= File.readlines(resource[:path])
+  end
+
+  def handle_create_with_match()
+    regex = resource[:match] ? Regexp.new(resource[:match]) : nil
+    match_count = lines.select { |l| regex.match(l) }.size
+    if match_count > 1 && resource[:multiple].to_s != 'true'
+     raise Puppet::Error, "More than one line in file '#{resource[:path]}' matches pattern '#{resource[:match]}'"
+    end
+    File.open(resource[:path], 'w') do |fh|
+      lines.each do |l|
+        fh.puts(regex.match(l) ? resource[:line] : l)
+      end
+
+      if (match_count == 0)
+        fh.puts(resource[:line])
+      end
+    end
+  end
+
+  def handle_create_with_after
+    regex = Regexp.new(resource[:after])
+
+    count = lines.count {|l| l.match(regex)}
+
+    case count
+    when 1 # find the line to put our line after
+      File.open(resource[:path], 'w') do |fh|
+        lines.each do |l|
+          fh.puts(l)
+          if regex.match(l) then
+            fh.puts(resource[:line])
+          end
+        end
+      end
+    when 0 # append the line to the end of the file
+      append_line
+    else
+      raise Puppet::Error, "#{count} lines match pattern '#{resource[:after]}' in file '#{resource[:path]}'.  One or no line must match the pattern."
+    end
+  end
+
+  ##
+  # append the line to the file.
+  #
+  # @api private
+  def append_line
+    File.open(resource[:path], 'a') do |fh|
+      fh.puts resource[:line]
+    end
+  end
+end

data/lib/templates/puppet/step-0/modules/stdlib/lib/puppet/type/anchor.rb

@@ -0,0 +1,46 @@
+Puppet::Type.newtype(:anchor) do
+  desc <<-'ENDOFDESC'
+  A simple resource type intended to be used as an anchor in a composite class.
+
+  In Puppet 2.6, when a class declares another class, the resources in the
+  interior class are not contained by the exterior class. This interacts badly
+  with the pattern of composing complex modules from smaller classes, as it
+  makes it impossible for end users to specify order relationships between the
+  exterior class and other modules.
+
+  The anchor type lets you work around this. By sandwiching any interior
+  classes between two no-op resources that _are_ contained by the exterior
+  class, you can ensure that all resources in the module are contained.
+
+      class ntp {
+        # These classes will have the correct order relationship with each
+        # other. However, without anchors, they won't have any order
+        # relationship to Class['ntp'].
+        class { 'ntp::package': }
+        -> class { 'ntp::config': }
+        -> class { 'ntp::service': }
+
+        # These two resources "anchor" the composed classes within the ntp
+        # class.
+        anchor { 'ntp::begin': } -> Class['ntp::package']
+        Class['ntp::service']    -> anchor { 'ntp::end': }
+      }
+
+  This allows the end user of the ntp module to establish require and before
+  relationships with Class['ntp']:
+
+      class { 'ntp': } -> class { 'mcollective': }
+      class { 'mcollective': } -> class { 'ntp': }
+
+  ENDOFDESC
+
+  newparam :name do
+    desc "The name of the anchor resource."
+  end
+
+  def refresh
+    # We don't do anything with them, but we need this to
+    #   show that we are "refresh aware" and not break the
+    #   chain of propagation.
+  end
+end

data/lib/templates/puppet/step-0/modules/stdlib/lib/puppet/type/file_line.rb

@@ -0,0 +1,79 @@
+Puppet::Type.newtype(:file_line) do
+
+  desc <<-EOT
+    Ensures that a given line is contained within a file.  The implementation
+    matches the full line, including whitespace at the beginning and end.  If
+    the line is not contained in the given file, Puppet will add the line to
+    ensure the desired state.  Multiple resources may be declared to manage
+    multiple lines in the same file.
+
+    Example:
+
+        file_line { 'sudo_rule':
+          path => '/etc/sudoers',
+          line => '%sudo ALL=(ALL) ALL',
+        }
+        file_line { 'sudo_rule_nopw':
+          path => '/etc/sudoers',
+          line => '%sudonopw ALL=(ALL) NOPASSWD: ALL',
+        }
+
+    In this example, Puppet will ensure both of the specified lines are
+    contained in the file /etc/sudoers.
+
+  EOT
+
+  ensurable do
+    defaultvalues
+    defaultto :present
+  end
+
+  newparam(:name, :namevar => true) do
+    desc 'An arbitrary name used as the identity of the resource.'
+  end
+
+  newparam(:match) do
+    desc 'An optional regular expression to run against existing lines in the file;\n' +
+        'if a match is found, we replace that line rather than adding a new line.'
+  end
+
+  newparam(:multiple) do
+    desc 'An optional value to determine if match can change multiple lines.'
+    newvalues(true, false)
+  end
+
+  newparam(:after) do
+    desc 'An optional value used to specify the line after which we will add any new lines. (Existing lines are added in place)'
+  end
+
+  newparam(:line) do
+    desc 'The line to be appended to the file located by the path parameter.'
+  end
+
+  newparam(:path) do
+    desc 'The file Puppet will ensure contains the line specified by the line parameter.'
+    validate do |value|
+      unless (Puppet.features.posix? and value =~ /^\//) or (Puppet.features.microsoft_windows? and (value =~ /^.:\// or value =~ /^\/\/[^\/]+\/[^\/]+/))
+        raise(Puppet::Error, "File paths must be fully qualified, not '#{value}'")
+      end
+    end
+  end
+
+  # Autorequire the file resource if it's being managed
+  autorequire(:file) do
+    self[:path]
+  end
+
+  validate do
+    unless self[:line] and self[:path]
+      raise(Puppet::Error, "Both line and path are required attributes")
+    end
+
+    if (self[:match])
+      unless Regexp.new(self[:match]).match(self[:line])
+        raise(Puppet::Error, "When providing a 'match' parameter, the value must be a regex that matches against the value of your 'line' parameter")
+      end
+    end
+
+  end
+end

data/lib/templates/puppet/step-0/modules/stdlib/manifests/init.pp

@@ -0,0 +1,20 @@
+# Class: stdlib
+#
+# This module manages stdlib. Most of stdlib's features are automatically
+# loaded by Puppet, but this class should be declared in order to use the
+# standardized run stages.
+#
+# Parameters: none
+#
+# Actions:
+#
+#   Declares all other classes in the stdlib module. Currently, this consists
+#   of stdlib::stages.
+#
+# Requires: nothing
+#
+class stdlib {
+
+  class { 'stdlib::stages': }
+
+}

data/lib/templates/puppet/step-0/modules/stdlib/manifests/stages.pp

@@ -0,0 +1,43 @@
+# Class: stdlib::stages
+#
+# This class manages a standard set of run stages for Puppet. It is managed by
+# the stdlib class, and should not be declared independently.
+#
+# The high level stages are (in order):
+#
+#  * setup
+#  * main
+#  * runtime
+#  * setup_infra
+#  * deploy_infra
+#  * setup_app
+#  * deploy_app
+#  * deploy
+#
+# Parameters: none
+#
+# Actions:
+#
+#   Declares various run-stages for deploying infrastructure,
+#   language runtimes, and application layers.
+#
+# Requires: nothing
+#
+# Sample Usage:
+#
+#  node default {
+#    include stdlib
+#    class { java: stage => 'runtime' }
+#  }
+#
+class stdlib::stages {
+
+  stage { 'setup':  before => Stage['main'] }
+  stage { 'runtime': require => Stage['main'] }
+  -> stage { 'setup_infra': }
+  -> stage { 'deploy_infra': }
+  -> stage { 'setup_app': }
+  -> stage { 'deploy_app': }
+  -> stage { 'deploy': }
+
+}

data/lib/templates/puppet/step-0/modules/stdlib/metadata.json

@@ -0,0 +1,111 @@
+{
+  "name": "puppetlabs-stdlib",
+  "version": "4.2.2",
+  "author": "puppetlabs",
+  "summary": "Puppet Module Standard Library",
+  "license": "Apache 2.0",
+  "source": "git://github.com/puppetlabs/puppetlabs-stdlib.git",
+  "project_page": "https://github.com/puppetlabs/puppetlabs-stdlib",
+  "issues_url": "https://github.com/puppetlabs/puppetlabs-stdlib/issues",
+  "operatingsystem_support": [
+    {
+      "operatingsystem": "RedHat",
+      "operatingsystemrelease": [
+        "4",
+        "5",
+        "6",
+        "7"
+      ]
+    },
+    {
+      "operatingsystem": "CentOS",
+      "operatingsystemrelease": [
+        "4",
+        "5",
+        "6",
+        "7"
+      ]
+    },
+    {
+      "operatingsystem": "OracleLinux",
+      "operatingsystemrelease": [
+        "4",
+        "5",
+        "6",
+        "7"
+      ]
+    },
+    {
+      "operatingsystem": "Scientific",
+      "operatingsystemrelease": [
+        "4",
+        "5",
+        "6",
+        "7"
+      ]
+    },
+    {
+      "operatingsystem": "SLES",
+      "operatingsystemrelease": [
+        "11 SP1"
+      ]
+    },
+    {
+      "operatingsystem": "Debian",
+      "operatingsystemrelease": [
+        "6",
+        "7"
+      ]
+    },
+    {
+      "operatingsystem": "Ubuntu",
+      "operatingsystemrelease": [
+        "10.04",
+        "12.04",
+        "14.04"
+      ]
+    },
+    {
+      "operatingsystem": "Solaris",
+      "operatingsystemrelease": [
+        "10",
+        "11"
+      ]
+    },
+    {
+      "operatingsystem": "Windows",
+      "operatingsystemrelease": [
+        "Server 2003",
+        "Server 2003 R2",
+        "Server 2008",
+        "Server 2008 R2",
+        "Server 2012",
+        "Server 2012 R2",
+        "7",
+        "8"
+      ]
+    },
+    {
+      "operatingsystem": "AIX",
+      "operatingsystemrelease": [
+        "5.3",
+        "6.1",
+        "7.1"
+      ]
+    }
+  ],
+  "requirements": [
+    {
+      "name": "pe",
+      "version_requirement": ">= 3.2.0 < 3.4.0"
+    },
+    {
+      "name": "puppet",
+      "version_requirement": ">=2.7.20 <4.0.0"
+    }
+  ],
+  "description": "Standard Library for Puppet Modules",
+  "dependencies": [
+  
+  ]
+}

data/lib/templates/puppet/step-0/modules/sudo/.fixtures.yml

@@ -0,0 +1,5 @@
+fixtures:
+  symlinks:
+    "sudo": "#{source_dir}"
+  repositories:
+    stdlib: "http://github.com/puppetlabs/puppetlabs-stdlib.git"

data/lib/templates/puppet/step-0/modules/sudo/.gemfile

@@ -0,0 +1,14 @@
+source 'https://rubygems.org'
+
+group :development, :test do
+  gem 'rake',                   :require => false
+  gem 'puppet-lint',            :require => false
+  gem 'rspec-puppet',           :require => false
+  gem 'puppetlabs_spec_helper', :require => false
+end
+
+if puppetversion = ENV['PUPPET_GEM_VERSION']
+  gem 'puppet', puppetversion, :require => false
+else
+  gem 'puppet', :require => false
+end

data/lib/templates/puppet/step-0/modules/sudo/.gemfile.lock

@@ -0,0 +1,43 @@
+GEM
+  remote: https://rubygems.org/
+  specs:
+    diff-lcs (1.2.5)
+    facter (1.7.5)
+    hiera (1.3.2)
+      json_pure
+    json_pure (1.8.1)
+    metaclass (0.0.4)
+    mocha (1.0.0)
+      metaclass (~> 0.0.1)
+    puppet (3.2.4)
+      facter (~> 1.6)
+      hiera (~> 1.0)
+      rgen (~> 0.6.5)
+    puppet-lint (0.3.2)
+    puppetlabs_spec_helper (0.4.1)
+      mocha (>= 0.10.5)
+      rake
+      rspec (>= 2.9.0)
+      rspec-puppet (>= 0.1.1)
+    rake (10.3.1)
+    rgen (0.6.6)
+    rspec (2.14.1)
+      rspec-core (~> 2.14.0)
+      rspec-expectations (~> 2.14.0)
+      rspec-mocks (~> 2.14.0)
+    rspec-core (2.14.8)
+    rspec-expectations (2.14.5)
+      diff-lcs (>= 1.1.3, < 2.0)
+    rspec-mocks (2.14.6)
+    rspec-puppet (1.0.1)
+      rspec
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  puppet (~> 3.2.0)
+  puppet-lint
+  puppetlabs_spec_helper
+  rake
+  rspec-puppet

data/lib/templates/puppet/step-0/modules/sudo/.travis.yml

@@ -0,0 +1,34 @@
+---
+branches:
+  only:
+    - master
+language: ruby
+bundler_args: --without development
+script: bundle exec rake spec SPEC_OPTS='--format documentation'
+after_success:
+  - git clone -q git://github.com/puppetlabs/ghpublisher.git .forge-releng
+  - .forge-releng/publish
+rvm:
+  - 1.8.7
+  - 1.9.3
+env:
+  matrix:
+    - PUPPET_GEM_VERSION="~> 2.7.0"
+    - PUPPET_GEM_VERSION="~> 3.1.0"
+    - PUPPET_GEM_VERSION="~> 3.2.0"
+    - PUPPET_GEM_VERSION="~> 3.3.0"
+  global:
+  - PUBLISHER_LOGIN=saz
+  - secure: |-
+      Uo1E9umjUYnHYnI9rEanW1/HwQlMmAWiFQ22Dq4BpkMFZ8Fw/Qr3bB9QLGAFpWS0jNXOeMbU
+      dCdMDyzum547q8+ouAoOfm6cbJWU1UpnM/Z9ARFvPMreLhT4lhzYFv4lh3r3MiaeT0WF0Cc3
+      7eo8FsveTDufilOUZM2SQmnXi7w=
+matrix:
+  include:
+    - rvm: 2.0.0
+      env: PUPPET_GEM_VERSION="~> 3.2.0"
+    - rvm: 2.0.0
+      env: PUPPET_GEM_VERSION="~> 3.3.0"
+notifications:
+  email: false
+gemfile: .gemfile

data/lib/templates/puppet/step-0/modules/sudo/LICENSE

@@ -0,0 +1,13 @@
+   Copyright 2012 Steffen Zieger
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

data/lib/templates/puppet/step-0/modules/sudo/Modulefile

@@ -0,0 +1,9 @@
+name    'saz-sudo'
+version '3.0.6'
+source 'UNKNOWN'
+author 'saz'
+license 'Apache License, Version 2.0'
+summary 'UNKNOWN'
+description 'Manage sudo configuration via Puppet'
+dependency 'puppetlabs/stdlib', '>= 2.3.0'
+project_page 'https://github.com/saz/puppet-sudo'

data/lib/templates/puppet/step-0/modules/sudo/README.md

@@ -0,0 +1,171 @@
+# puppet-sudo [![Build Status](https://secure.travis-ci.org/saz/puppet-sudo.png)](http://travis-ci.org/saz/puppet-sudo)
+
+Manage sudo configuration via Puppet
+
+### Gittip
+[![Support via Gittip](https://rawgithub.com/twolfson/gittip-badge/0.2.0/dist/gittip.png)](https://www.gittip.com/saz/)
+
+## Usage
+
+### WARNING
+**This module will purge your current sudo config**
+
+If this is not what you're expecting, set `purge` and/or `config_file_replace` to **false**
+
+### Install sudo with default sudoers
+
+#### Purge current sudo config
+```puppet
+    class { 'sudo': }
+```
+
+#### Purge sudoers.d directory, but leave sudoers file as it is
+```puppet
+    class { 'sudo':
+      config_file_replace => true,
+    }
+```
+
+#### Leave current sudo config as it is
+```puppet
+    class { 'sudo':
+      purge               => false,
+      config_file_replace => false,
+    }
+```
+
+### Adding sudoers configuration
+
+#### Using Code
+
+```puppet
+    class { 'sudo': }
+    sudo::conf { 'web':
+      source => 'puppet:///files/etc/sudoers.d/web',
+    }
+    sudo::conf { 'admins':
+      priority => 10,
+      content  => "%admins ALL=(ALL) NOPASSWD: ALL",
+    }
+    sudo::conf { 'joe':
+      priority => 60,
+      source   => 'puppet:///files/etc/sudoers.d/users/joe',
+    }
+```
+
+#### Using Hiera
+
+A hiera hash may be used to assemble the sudoers configuration.
+Hash merging is also enabled, which supports layering the configuration settings.
+
+Examples using:
+- YAML backend
+- an environment called __production__
+- a __/etc/puppet/hiera.yaml__ hierarchy configuration:
+
+```yaml
+:hierarchy:
+  - "%{environment}"
+  - "defaults"
+```
+
+##### Load module
+
+###### Using Puppet version 3+
+
+Load the module via Puppet Code or your ENC.
+
+```puppet
+    include sudo
+```
+
+###### Using Puppet version 2.7+
+
+After [Installing Hiera](http://docs.puppetlabs.com/hiera/1/installing.html):
+
+- Load the `sudo` and `sudo::configs` modules via Puppet Code or your ENC.
+
+```puppet
+    include sudo
+    include sudo::configs
+```
+
+##### Configure Hiera YAML __(defaults.yaml)__
+
+These defaults will apply to all systems.
+
+```yaml
+sudo::configs:
+    'web':
+        'source'    : 'puppet:///files/etc/sudoers.d/web'
+    'admins':
+        'content'   : "%admins ALL=(ALL) NOPASSWD: ALL"
+        'priority'  : 10
+    'joe':
+        'priority'  : 60
+        'source'    : 'puppet:///files/etc/sudoers.d/users/joe'
+```
+
+##### Configure Hiera YAML __(production.yaml)__
+
+This will only apply to the production environment.
+In this example we are:
+- inheriting/preserving the __web__ configuration
+- overriding the __admins__ configuration
+- removing the __joe__ configuration
+
+```yaml
+sudo::configs:
+    'admins':
+        'content'   : "%prodadmins ALL=(ALL) NOPASSWD: ALL"
+        'priority'  : 10
+    'joe':
+        'ensure'    : 'absent'
+        'source'    : 'puppet:///files/etc/sudoers.d/users/joe'
+```
+
+If you have Hiera version >= 1.2.0 and enable [Hiera Deeper Merging](http://docs.puppetlabs.com/hiera/1/lookup_types.html#deep-merging-in-hiera--120) you may conditionally override any setting.
+
+In this example we are:
+- inheriting/preserving the __web__ configuration
+- overriding the __admins:content__ setting
+- inheriting/preserving the __admins:priority__ setting
+- inheriting/preserving the __joe:source__ and __joe:priority__ settings
+- removing the __joe__ configuration
+
+```yaml
+sudo::configs:
+    'admins':
+        'content'   : "%prodadmins ALL=(ALL) NOPASSWD: ALL"
+    'joe':
+        'ensure'    : 'absent'
+```
+
+### sudo::conf / sudo::configs notes
+* You can pass template() through content parameter.
+* One of content or source must be set.
+
+## sudo class parameters
+
+| Parameter           | Type    | Default     | Description |
+| :--------------     | :------ |:----------- | :---------- |
+| enable              | boolean | true        | Set this to remove or purge all sudoers configs |
+| package             | string  | OS specific | Set package name _(for unsupported platforms)_ |
+| package_ensure      | string  | present     | latest, absent, or a specific package version |
+| package_source      | string  | OS specific | Set package source _(for unsupported platforms)_ |
+| purge               | boolean | true        | Purge unmanaged files from config_dir |
+| config_file         | string  | OS specific | Set config_file _(for unsupported platforms)_ |
+| config_file_replace | boolean | true        | Replace config file with module config file |
+| config_dir          | string  | OS specific | Set config_dir _(for unsupported platforms)_ |
+| source              | string  | OS specific | Set source _(for unsupported platforms)_ |
+
+## sudo::conf class / sudo::configs hash parameters
+
+| Parameter       | Type   | Default     | Description |
+| :-------------- | :----- |:----------- | :---------- |
+| ensure          | string | present     | present or absent |
+| priority        | number | 10          | file name prefix |
+| content         | string | undef       | content of configuration snippet |
+| source          | string | undef       | source of configuration snippet |
+| sudo_config_dir | string | OS Specific | configuration snippet directory _(for unsupported platforms)_ |
+

data/lib/templates/puppet/step-0/modules/sudo/Rakefile

@@ -0,0 +1 @@
+require 'puppetlabs_spec_helper/rake_tasks'