bebox 0.0.1

data/lib/templates/project/gitignore.erb

@@ -0,0 +1,7 @@
+.vagrant/
+.bundle/
+.checkpoints/
+config/keys/
+<% steps.each do |step_name| %>
+puppet/steps/<%=step_name%>/hiera/data/
+<% end %>

data/lib/templates/project/ubuntu_dependencies

@@ -0,0 +1,10 @@
+git-core
+build-essential
+curl
+whois
+openssl
+libxslt1-dev
+autoconf
+bison
+libreadline5
+libsqlite3-dev

data/lib/templates/puppet/default_profiles/base/fundamental/ruby/manifests/init.pp

@@ -0,0 +1,24 @@
+# The profile class include the classes instantiation or
+# puppet/modules type resource definitions.
+# It can include hiera calls for the parametter setting.
+# Example:
+# class profiles::category::technology {
+#   $technology_parameters = hiera("technology")
+#   $parameter1 = technology_parameters[parameter1]
+#   ...
+#   class { "technology_resource":
+#     parameter1  => $parameter1
+#     ...
+#   }
+# }
+
+class profiles::base::fundamental::ruby {
+  # Get rbenv options from hiera
+  $rbenv_install_hash = { 'rbenv_install' => hiera('rbenv::install', {}) }
+  $rbenv_compile_hash = hiera('rbenv::compile', {})
+  $rbenv_gem_hash = hiera('rbenv::gem', {})
+  # Install rbenv, ruby version and gems from options
+  create_resources('rbenv::install', $rbenv_install_hash)
+  create_resources('rbenv::compile', $rbenv_compile_hash)
+  create_resources('rbenv::gem', $rbenv_gem_hash)
+}

data/lib/templates/puppet/default_profiles/base/fundamental/sudo/manifests/init.pp

@@ -0,0 +1,22 @@
+# The profile class include the classes instantiation or
+# puppet/modules type resource definitions.
+# It can include hiera calls for the parametter setting.
+# Example:
+# class profiles::category::technology {
+#   $technology_parameters = hiera("technology")
+#   $parameter1 = technology_parameters[parameter1]
+#   ...
+#   class { "technology_resource":
+#     parameter1  => $parameter1
+#     ...
+#   }
+# }
+
+class profiles::base::fundamental::sudo {
+  include stdlib
+  # Module takes sudo users from hiera
+  class { '::sudo':
+    purge               => false,
+    config_file_replace => false,
+  }
+}

data/lib/templates/puppet/default_profiles/base/fundamental/users/manifests/init.pp

@@ -0,0 +1,18 @@
+# The profile class include the classes instantiation or
+# puppet/modules type resource definitions.
+# It can include hiera calls for the parametter setting.
+# Example:
+# class profiles::category::technology {
+#   $technology_parameters = hiera("technology")
+#   $parameter1 = technology_parameters[parameter1]
+#   ...
+#   class { "technology_resource":
+#     parameter1  => $parameter1
+#     ...
+#   }
+# }
+
+class profiles::base::fundamental::users {
+  # Module users internally load parameters from hiera
+  include ::users
+}

data/lib/templates/puppet/default_profiles/base/security/fail2ban/Puppetfile

@@ -0,0 +1,2 @@
+
+mod "netmanagers/fail2ban", '1.4.0'

data/lib/templates/puppet/default_profiles/base/security/fail2ban/manifests/init.pp

@@ -0,0 +1,28 @@
+# The profile class include the classes instantiation or
+# puppet/modules type resource definitions.
+# It can include hiera calls for the parametter setting.
+# Example:
+# class profiles::category::technology {
+#   $technology_parameters = hiera("technology")
+#   $parameter1 = technology_parameters[parameter1]
+#   ...
+#   class { "technology_resource":
+#     parameter1  => $parameter1
+#     ...
+#   }
+# }
+
+class profiles::base::security::fail2ban {
+  # Obtain fail2ban parameters from hiera
+  $fail2ban_parameters = hiera('fail2ban', {})
+  $bantime = $fail2ban_parameters[bantime]
+  $maxretry = $fail2ban_parameters[maxretry]
+  $mailto = $fail2ban_parameters[destemail]
+
+  # Instance the fail2ban class with hiera parameters
+  class { '::fail2ban':
+    bantime => $bantime,
+    maxretry => $maxretry,
+    mailto => $mailto,
+  }
+}

data/lib/templates/puppet/default_profiles/base/security/iptables/Puppetfile

@@ -0,0 +1,2 @@
+
+mod "puppetlabs/firewall", '1.0.2'

data/lib/templates/puppet/default_profiles/base/security/iptables/manifests/init.pp

@@ -0,0 +1,27 @@
+# The profile class include the classes instantiation or
+# puppet/modules type resource definitions.
+# It can include hiera calls for the parametter setting.
+# Example:
+# class profiles::category::technology {
+#   $technology_parameters = hiera("technology")
+#   $parameter1 = technology_parameters[parameter1]
+#   ...
+#   class { "technology_resource":
+#     parameter1  => $parameter1
+#     ...
+#   }
+# }
+
+class profiles::base::security::iptables {
+  # Make the rules persist after shutdown
+  package { 'iptables-persistent':
+    ensure => present
+  }
+  resources { "firewall":
+    purge => true,
+    require => Package['iptables-persistent'],
+  }
+  # Obtain iptables parameters from hiera and create firewall rules
+  $firewall_rules_hash = hiera('firewall', {})
+  create_resources('firewall', $firewall_rules_hash)
+}

data/lib/templates/puppet/default_profiles/base/security/ssh/Puppetfile

@@ -0,0 +1,2 @@
+
+mod "attachmentgenie/ssh", '1.3.1'

data/lib/templates/puppet/default_profiles/base/security/ssh/manifests/init.pp

@@ -0,0 +1,30 @@
+# The profile class include the classes instantiation or
+# puppet/modules type resource definitions.
+# It can include hiera calls for the parametter setting.
+# Example:
+# class profiles::category::technology {
+#   $technology_parameters = hiera("technology")
+#   $parameter1 = technology_parameters[parameter1]
+#   ...
+#   class { "technology_resource":
+#     parameter1  => $parameter1
+#     ...
+#   }
+# }
+
+class profiles::base::security::ssh {
+  # Obtain ssh parameters from hiera
+  $ssh_parameters = hiera('ssh::server', {})
+  $port = $ssh_parameters[port]
+  $password_authentication = $ssh_parameters[password_authentication]
+  $pubkey_authentication = $ssh_parameters[pubkey_authentication]
+  $permit_root_login = $ssh_parameters[permit_root_login]
+
+  # Instance the ssh::server class with hiera parameters
+  class { '::ssh::server':
+    port => $port,
+    password_authentication => $password_authentication,
+    pubkey_authentication => $pubkey_authentication,
+    permit_root_login => $permit_root_login,
+  }
+}

data/lib/templates/puppet/default_profiles/base/security/sysctl/Puppetfile

@@ -0,0 +1,2 @@
+
+mod "thias/sysctl", '0.3.1'

data/lib/templates/puppet/default_profiles/base/security/sysctl/manifests/init.pp

@@ -0,0 +1,20 @@
+# The profile class include the classes instantiation or
+# puppet/modules type resource definitions.
+# It can include hiera calls for the parametter setting.
+# Example:
+# class profiles::category::technology {
+#   $technology_parameters = hiera("technology")
+#   $parameter1 = technology_parameters[parameter1]
+#   ...
+#   class { "technology_resource":
+#     parameter1  => $parameter1
+#     ...
+#   }
+# }
+
+class profiles::base::security::sysctl {
+  # Obtain sysctl rules from hiera
+  $sysctl_values_hash = hiera('sysctl', {})
+  # Set sysctl rules
+  create_resources('sysctl', $sysctl_values_hash)
+}

data/lib/templates/puppet/default_profiles/base/users/ssh/Puppetfile

@@ -0,0 +1,2 @@
+
+mod "saz/ssh", '2.3.6'

data/lib/templates/puppet/default_profiles/base/users/ssh/manifests/init.pp

@@ -0,0 +1,47 @@
+# The profile class include the classes instantiation or
+# puppet/modules type resource definitions.
+# It can include hiera calls for the parametter setting.
+# Example:
+# class profiles::category::technology {
+#   $technology_parameters = hiera("technology")
+#   $parameter1 = technology_parameters[parameter1]
+#   ...
+#   class { "technology_resource":
+#     parameter1  => $parameter1
+#     ...
+#   }
+# }
+
+class profiles::base::users::ssh {
+  # Configure agent forwarding for application user
+  $ssh_forwarding_hash = hiera_hash('ssh::client_rules', {})
+  class { '::ssh::client':
+    storeconfigs_enabled => false,
+    options => $ssh_forwarding_hash
+  }
+}
+
+# define profiles::users::get_forwarding_rules (
+#   $ssh_forwarding_hash = {},
+#   ) {
+#   $forwarding_hosts = {}
+#   each($ssh_forwarding_hash) |$user, $user_forwarding_hash| {
+#     $hosts = $user_forwarding_hash[hosts]
+#     each($hosts) |$host, $value| {
+#       $host_hash = { "Host $host" => { 'User' => $user, 'ForwardAgent' => $value, 'StrictHostKeyChecking' => 'no' } }
+#       $forwarding_hosts += $host_hash
+#     }
+#   }
+#   profiles::users::forwarding { 'forwardinghosts':
+#     forwarding_hosts => $forwarding_hosts,
+#   }
+# }
+
+# define profiles::users::forwarding (
+#   $forwarding_hosts = {},
+#   ){
+#   class { 'ssh::client':
+#     storeconfigs_enabled => false,
+#     options => $forwarding_hosts
+#   }
+# }

data/lib/templates/puppet/default_profiles/base/users/users/manifests/init.pp

@@ -0,0 +1,18 @@
+# The profile class include the classes instantiation or
+# puppet/modules type resource definitions.
+# It can include hiera calls for the parametter setting.
+# Example:
+# class profiles::category::technology {
+#   $technology_parameters = hiera("technology")
+#   $parameter1 = technology_parameters[parameter1]
+#   ...
+#   class { "technology_resource":
+#     parameter1  => $parameter1
+#     ...
+#   }
+# }
+
+class profiles::base::users::users {
+  # Module users internally load parameters from hiera
+  include ::users
+}

data/lib/templates/puppet/default_roles/fundamental/manifests/init.pp

@@ -0,0 +1,16 @@
+# The role class can include many profiles
+# Example:
+# class roles::example_role {
+#   include profiles::category::example_profile_1
+#   include profiles::category::example_profile_2
+#   ...
+#   include profiles::category::example_profile_N
+# }
+# The profiles can be added/removed to the role manually or through the
+# 'bebox role add_profile' and 'bebox role remove_profile' commands.
+
+class roles::fundamental {
+  include profiles::base::fundamental::ruby
+  include profiles::base::fundamental::sudo
+  include profiles::base::fundamental::users
+}

data/lib/templates/puppet/default_roles/security/manifests/init.pp

@@ -0,0 +1,17 @@
+# The role class can include many profiles
+# Example:
+# class roles::example_role {
+#   include profiles::category::example_profile_1
+#   include profiles::category::example_profile_2
+#   ...
+#   include profiles::category::example_profile_N
+# }
+# The profiles can be added/removed to the role manually or through the
+# 'bebox role add_profile' and 'bebox role remove_profile' commands.
+
+class roles::security {
+  include profiles::base::security::fail2ban
+  include profiles::base::security::iptables
+  include profiles::base::security::ssh
+  include profiles::base::security::sysctl
+}

data/lib/templates/puppet/default_roles/users/manifests/init.pp

@@ -0,0 +1,15 @@
+# The role class can include many profiles
+# Example:
+# class roles::example_role {
+#   include profiles::category::example_profile_1
+#   include profiles::category::example_profile_2
+#   ...
+#   include profiles::category::example_profile_N
+# }
+# The profiles can be added/removed to the role manually or through the
+# 'bebox role add_profile' and 'bebox role remove_profile' commands.
+
+class roles::users {
+  include profiles::base::users::users
+  include profiles::base::users::ssh
+}

data/lib/templates/puppet/profiles/Puppetfile.erb

@@ -0,0 +1,24 @@
+# Bebox template for the profiles.
+
+# For modules loaded from forge puppetlabs
+# mod 'organization/module_name', 'version'
+# example: mod "puppetlabs/nginx", '1.0.0'
+
+# For modules loaded from github releases tarball
+# mod "organization/module_name", :git => "git_url", :ref => 'v1.0.0'
+# mod "organization/module_name", :git => "git_url", :ref => 'branch_name'
+# example: mod "jfryman/nginx", :git => "git://github.com/jfryman/puppet-nginx.git", :ref => 'v0.0.9'
+# example: mod "jfryman/nginx", :git => "git://github.com/jfryman/puppet-nginx.git", :ref => 'master'
+
+
+# This are some common modules we have used and works well.
+# You can uncomment for use it or can add new ones.
+
+# mod "alup/rbenv", '1.2.0'
+# mod "jfryman/nginx", '0.0.9'
+# mod "dwerder/redis", '1.1.0'
+# mod "puppetlabs/mysql", '2.2.3'
+# mod "akumria/postgresql", '1.2.0'
+# mod "dwerder/mongodb", '3.3.1'
+# mod "mwillbanks/newrelic", '0.1.0'
+# mod "dhoppe/postfix", :git => "git://github.com/dhoppe/puppet-postfix.git", :ref => '3.0.x'

data/lib/templates/puppet/profiles/manifests/init.pp.erb

@@ -0,0 +1,17 @@
+# The profile class include the classes instantiation or
+# puppet/modules type resource definitions.
+# It can include hiera calls for the parametter setting.
+# Example:
+# class profiles::category::technology {
+#   $technology_parameters = hiera("technology")
+#   $parameter1 = technology_parameters[parameter1]
+#   ...
+#   class { "technology_resource":
+#     parameter1  => $parameter1
+#     ...
+#   }
+# }
+
+class profiles::<%=profile.namespace_name%> {
+
+}

data/lib/templates/puppet/roles/manifests/init.pp.erb

@@ -0,0 +1,14 @@
+# The role class can include many profiles
+# Example:
+# class roles::example_role {
+#   include profiles::category::example_profile_1
+#   include profiles::category::example_profile_2
+#   ...
+#   include profiles::category::example_profile_N
+# }
+# The profiles can be added/removed to the role manually or through the
+# 'bebox role add_profile' and 'bebox role remove_profile' commands.
+
+class roles::<%=role.name%> {
+
+}

data/lib/templates/puppet/step-0/Puppetfile.erb

@@ -0,0 +1,5 @@
+forge "https://forgeapi.puppetlabs.com"
+
+<% profile_modules.each do |puppet_module| %>
+<%="#{puppet_module}\n"%>
+<% end %>

data/lib/templates/puppet/step-0/hiera/data/common.yaml.erb

@@ -0,0 +1,26 @@
+user_accounts:
+  - name:  'puppet'
+    email:  ''
+    key:  '<%= ssh_key %>'
+    uid:  7000
+sudo::configs:
+  'puppet':
+    ensure:  'present'
+    content:  '%puppet ALL=(ALL) NOPASSWD: ALL'
+    priority:  10
+rbenv::install:
+    user:  'puppet'
+    group:  'puppet'
+    home:  '/home/puppet'
+rbenv::compile:
+    "1.9.3-p327":
+        user:  "puppet"
+        home:  "/home/puppet"
+        global:  true
+rbenv::gem:
+    'puppet':
+        user:  'puppet'
+        ruby:  '1.9.3-p327'
+    'librarian-puppet':
+        user:  'puppet'
+        ruby:  '1.9.3-p327'

data/lib/templates/puppet/step-0/hiera/data/environment.yaml.erb

@@ -0,0 +1,26 @@
+user_accounts:
+  - name:  'puppet'
+    email:  ''
+    key:  '<%= ssh_key %>'
+    uid:  7000
+sudo::configs:
+  'puppet':
+    ensure:  'present'
+    content:  '%puppet ALL=(ALL) NOPASSWD: ALL'
+    priority:  10
+rbenv::install:
+    user:  'puppet'
+    group:  'puppet'
+    home:  '/home/puppet'
+rbenv::compile:
+    "1.9.3-p327":
+        user:  "puppet"
+        home:  "/home/puppet"
+        global:  true
+rbenv::gem:
+    'puppet':
+        user:  'puppet'
+        ruby:  '1.9.3-p327'
+    'librarian-puppet':
+        user:  'puppet'
+        ruby:  '1.9.3-p327'

data/lib/templates/puppet/step-0/hiera/data/node.yaml.erb

@@ -0,0 +1,26 @@
+user_accounts:
+  - name:  'puppet'
+    email:  ''
+    key:  '<%= ssh_key %>'
+    uid:  7000
+sudo::configs:
+  'puppet':
+    ensure:  'present'
+    content:  '%puppet ALL=(ALL) NOPASSWD: ALL'
+    priority:  10
+rbenv::install:
+    user:  'puppet'
+    group:  'puppet'
+    home:  '/home/puppet'
+rbenv::compile:
+    "1.9.3-p327":
+        user:  "puppet"
+        home:  "/home/puppet"
+        global:  true
+rbenv::gem:
+    'puppet':
+        user:  'puppet'
+        ruby:  '1.9.3-p327'
+    'librarian-puppet':
+        user:  'puppet'
+        ruby:  '1.9.3-p327'

data/lib/templates/puppet/step-0/hiera/hiera.yaml.erb

@@ -0,0 +1,11 @@
+# Important note: This file is empty.
+# /etc/puppet/hiera.yml is used by default.
+# deploy_user and deploy_environment is set in the puppet apply command executed by capistrano
+:backends: yaml
+:yaml:
+  :datadir: %{::deploy_to}/current/steps/<%=step_dir%>/hiera/data
+:hierarchy:
+  - %{::fqdn}
+  - %{::deploy_environment}
+  - common
+:logger: console

data/lib/templates/puppet/step-0/manifests/node.erb

@@ -0,0 +1,5 @@
+node <%= node.hostname %> {
+
+  include roles::fundamental
+
+}

data/lib/templates/puppet/step-0/manifests/site.pp.erb

@@ -0,0 +1,15 @@
+# This file associates nodes with roles
+# Example:
+# node node0.server1.test {
+#   include roles::role_1
+# }
+# The roles and profiles pattern recommends to associate one node with
+# one and only one role.
+# The role can be set to the node manually or through the
+# 'bebox node set_role' command.
+
+<% nodes.each do |node| %>
+node <%= node.hostname %> {
+  include roles::fundamental
+}
+<% end %>

data/lib/templates/puppet/step-0/modules/rbenv/AUTHORS

@@ -0,0 +1,11 @@
+Andreas Loupasakis
+Chiel Kunkels
+Fabio Rehm
+Jason Gill
+Jonathan Owens
+LStuker
+Marcello Barnaba
+Mislav Marohnić
+Nic Benders
+Stratos Pavlakis
+emyl

data/lib/templates/puppet/step-0/modules/rbenv/CHANGELOG.md

@@ -0,0 +1,70 @@
+# Changelog
+
+## 1.2.0
+
+ - Pass --disable-install-doc configure option by default to rbenv::compile (by Jonathan Owens)
+ - Use cache folder for rbenv installations to benefit from
+https://github.com/sstephenson/ruby-build/pull/232
+
+## 1.1.0
+
+- Use .profile as the default rc file and let the user override it.
+  (This choice is preferred than bashrc because login shells do not read .bashrc file.)
+- Fix the usage of ruby interpreter during gem execution environment in
+  rbenvgem provider.
+- Use rbenv::gem to install bundler inside proper ruby environment.
+- Fix class name for rbenv dependencies.
+
+## 1.0.0
+
+- Support for installation of rbenv plugins (Special thanks to @fgrehm - Fabio
+  Rehm)
+  * Implemented rbenv::plugin
+  * Moved ruby-build to rbenv::plugin::rubybuild
+  * Implemented rbenv::plugin::rbenvvars
+- Support for custom ruby build definitions (by Fabio Rehm)
+- Refactored test suite related to the major changes (by Mislav Marohnic)
+- Added bundle resource to bundle install inside a client directory (by
+  Marcello Barnaba)
+- Added a client resource defining an user that shares an rbenv
+  installation. (by Marcello Barnaba)
+- Major rewrite of the core parts (Special thanks to @vjt - Marcello
+  Barnaba)
+  * Rbenv class has been removed and replaced by defines for
+    installation, compilation etc.
+  * Refactor gem installation. Implemented rubygems provider, type etc.
+- Added SuSE dependencies.
+- Implemented gem installation capabilities (rbenv::gem first iteration by newrelic team).
+- Support multiple users with different rbenvs (by newrelic guys).
+
+## 0.3.1
+
+- Fix escape string for PATH environment variable [GH-11]
+
+## 0.3.0
+
+- Add option to set group of the user [GH-9]
+- Add option to set user home
+
+## 0.2.0
+
+- CentOS, Redhat compatibility [GH-5]
+- Allow per user installation (several users on a single machine can have rbenv
+  setup for them) [GH-5]
+- Provide a more generic approach. Now the root user can be used, too.
+
+## 0.1.0
+
+- Move install to a define and provide more parameterization.
+  WARNING! This is a major changeset and it is not compatible with previous
+  versions. This will be included in a new minor version.
+
+## 0.0.2
+
+- Handle dependencies based on platform.
+- Add specs and basic testing structures.
+
+## 0.0.1
+
+- Hello World
+

data/lib/templates/puppet/step-0/modules/rbenv/Gemfile

@@ -0,0 +1,8 @@
+source "https://rubygems.org"
+
+version = ENV.key?('PUPPET_VERSION') ? "= #{ENV['PUPPET_VERSION']}" : ['>= 2.7']
+
+gem 'puppet', version
+gem 'rspec-puppet'
+gem 'puppet-lint'
+gem 'rake'

data/lib/templates/puppet/step-0/modules/rbenv/Gemfile.lock

@@ -0,0 +1,28 @@
+GEM
+  remote: https://rubygems.org/
+  specs:
+    diff-lcs (1.1.3)
+    facter (1.6.11)
+    puppet (2.7.18)
+      facter (~> 1.5)
+    puppet-lint (0.1.13)
+    rake (0.9.2.2)
+    rspec (2.11.0)
+      rspec-core (~> 2.11.0)
+      rspec-expectations (~> 2.11.0)
+      rspec-mocks (~> 2.11.0)
+    rspec-core (2.11.1)
+    rspec-expectations (2.11.2)
+      diff-lcs (~> 1.1.3)
+    rspec-mocks (2.11.1)
+    rspec-puppet (0.1.4)
+      rspec
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  puppet (>= 2.7)
+  puppet-lint
+  rake
+  rspec-puppet

data/lib/templates/puppet/step-0/modules/rbenv/Modulefile

@@ -0,0 +1,7 @@
+name    'alup-rbenv'
+version '1.2.0'
+author 'alup'
+license 'MIT'
+summary 'rbenv Ruby Version Manager module'
+description 'Puppet module for rbenv Ruby Version Manager'
+project_page 'https://github.com/alup/puppet-rbenv'