bitswarmbox 1.0.0.pre16

data/puppet/modules/packer/manifests/aws/users.pp

@@ -0,0 +1,26 @@
+class packer::aws::users {
+  include '::packer::aws'
+  $service_acct = $::packer::aws::local_service_acct_user
+
+  if $service_acct != 'ubuntu' {
+    user { $service_acct:
+      ensure     => present,
+      home       => "/home/${service_acct}",
+      managehome => true,
+    }
+    # ->
+    # sudo::sudoers { $service_acct:
+    #   ensure   => 'present',
+    #   users    => [$service_acct],
+    #   tags     => ['NOPASSWD'],
+    # }
+  }
+
+  class { 'ohmyzsh::config': theme_hostname_slug => '%M' }
+
+  # for multiple users in one shot and set their shell to zsh
+  ohmyzsh::install { 'root': set_sh => true, disable_auto_update => true }
+  ohmyzsh::install { $service_acct: set_sh => true, disable_update_prompt => true }
+  ohmyzsh::plugins { ['root', $service_acct]: }
+  ohmyzsh::theme { ['root', $service_acct]: }
+}

data/puppet/modules/packer/manifests/aws.pp

@@ -0,0 +1,7 @@
+class packer::aws(
+  $local_service_acct_user = 'ubuntu',
+  $local_service_acct_gecos = 'Ubuntu',
+  $sudoers_file = '/etc/sudoers',
+) {
+
+}

data/puppet/modules/packer/manifests/clock.pp

@@ -0,0 +1,10 @@
+class packer::clock(
+  $timezone = 'America/New_York'
+) {
+  include '::ntp'
+
+  class { '::timezone':
+    timezone => $timezone,
+  }
+
+}

data/puppet/modules/packer/manifests/updates.pp

@@ -0,0 +1,27 @@
+class packer::updates {
+
+  $linux_pkgs = [
+    'bash',
+    'openssl',
+  ]
+
+  $debian_pkgs = [
+    'libc6',
+    'openssh-client',
+    'openssh-server',
+  ]
+
+  $redhat_pkgs = [
+    'glibc',
+    'openssh',
+  ]
+
+  if $::osfamily == 'Debian' {
+    $pkgs_to_update = $linux_pkgs + $debian_pkgs
+  } elsif $::osfamily == 'Redhat' {
+    $pkgs_to_update = $linux_pkgs + $redhat_pkgs
+  }
+
+  package { $pkgs_to_update: ensure => latest; }
+
+}

data/puppet/modules/packer/manifests/vagrant/params.pp

@@ -0,0 +1,14 @@
+class packer::vagrant::params {
+
+  case $::osfamily {
+    debian, redhat: {
+      $home_base    = '/home'
+      $sudoers_file = '/etc/sudoers'
+    }
+
+    default: {
+      fail( "Unsupported platform: ${::osfamily}/${::operatingsystem}" )
+    }
+  }
+
+}

data/puppet/modules/packer/manifests/vagrant.pp

@@ -0,0 +1,63 @@
+class packer::vagrant(
+  $manage_user = 'true',
+  $ohymzsh = 'true',
+  $manage_ssh = 'false',
+  $public_rsa_key = 'AAAAB3NzaC1yc2EAAAABIwAAAQEA6NF8iallvQVp22WDkTkyrtvp9eWW6A8YVr+kz4TjGYe7gHzIw+niNltGEFHzD8+v1I2YJ6oXevct1YeS0o9HZyN1Q9qgCgzUFtdOKLv6IedplqoPkcmF0aYet2PkEDo3MlTBckFXPITAMzF8dJSIFo9D8HfdOV0IAdx4O7PtixWKn5y2hMNG0zQPyUecp4pzC6kivAIhyfHilFR61RGL+GPXQ2MWZWFYbAGjyiYJnAmCP3NOTd0jMZEnDkbUvxhMmBYSdETk1rRgm+R4LOzFUGaHqHDLKLX+FIPKcF96hrucXzcWyLbIbEgE98OHlnVYCzRdK8jlqm8tehUc9c9WhQ==',
+  $manage_sudo = 'false',
+) inherits packer::vagrant::params {
+
+  if str2bool($manage_user) {
+    group { 'vagrant':
+      ensure => present,
+    }
+
+    user { 'vagrant':
+      ensure     => present,
+      home       => "${home_base}/vagrant",
+      managehome => true,
+      gid        => 'vagrant',
+      groups     => [ 'vagrant', ],
+      shell      => '/bin/bash',
+      require    => Group[ 'vagrant' ],
+    }
+
+    if str2bool($ohymzsh) {
+      # for multiple users in one shot and set their shell to zsh
+      ohmyzsh::install { 'root': set_sh => true, disable_auto_update => true }
+      ohmyzsh::install { 'vagrant': set_sh => true, disable_update_prompt => true }
+      ohmyzsh::plugins { ['root', 'vagrant']: }
+      ohmyzsh::theme { ['root', 'vagrant']: }
+    }
+  }
+
+  if str2bool($manage_ssh) {
+    file { "${home_base}/vagrant/.ssh":
+      ensure  => directory,
+      owner   => 'vagrant',
+      group   => 'vagrant',
+      mode    => '0600',
+      require => User[ 'vagrant' ],
+    }
+
+    ssh_authorized_key { 'vagrant':
+      ensure  => present,
+      user    => 'vagrant',
+      key     => $public_rsa_key,
+      type    => 'ssh-rsa',
+    }
+  }
+
+  if str2bool($manage_sudo) {
+    sudo::sudoers { 'vagrant':
+      ensure   => 'present',
+      users    => ['vagrant'],
+      tags     => ['NOPASSWD'],
+    }
+
+    file_line { "allow ${sudoers_file} notty":
+      path   => $sudoers_file,
+      line   => '#Defaults requiretty',
+      match  => 'Defaults\s+requiretty',
+    }
+  }
+}

data/puppet/modules/packer/manifests/vmtools/params.pp

@@ -0,0 +1,35 @@
+class packer::vmtools::params {
+
+  case $::osfamily {
+    'Redhat' : {
+      $root_home = '/root'
+      $required_packages = [ 'kernel-devel', 'gcc' ]
+    }
+
+    'Debian' : {
+      $root_home = '/root'
+      $required_packages = [ "linux-headers-${::kernelrelease}" ]
+    }
+
+    default : {
+      fail( "Unsupported platform: ${::osfamily}/${::operatingsystem}" )
+    }
+  }
+
+  case $::provisioner {
+    virtualbox: {
+      $tools_iso   = 'VBoxGuestAdditions.iso'
+      $install_cmd = 'sh /tmp/vmtools/VBoxLinuxAdditions.run --nox11 ; true'
+    }
+
+    vmware: {
+      $tools_iso   = 'linux.iso'
+      $install_cmd = 'tar zxf /tmp/vmtools/VMwareTools-*.tar.gz -C /tmp/ ; /tmp/vmware-tools-distrib/vmware-install.pl --force-install ; rm -rf /tmp/vmware-tools-distrib'
+    }
+
+    default: {
+      fail( "Unsupported provisioner: ${::provisioner}" )
+    }
+  }
+
+}

data/puppet/modules/packer/manifests/vmtools.pp

@@ -0,0 +1,52 @@
+class packer::vmtools inherits packer::vmtools::params {
+
+  if ( $required_packages != undef ) {
+    package { $required_packages:
+      ensure => installed,
+      before => File[ '/tmp/vmtools' ],
+    }
+  }
+
+  file { '/tmp/vmtools':
+    ensure => directory,
+  }
+
+  mount { '/tmp/vmtools':
+    ensure  => mounted,
+    device  => "${root_home}/${tools_iso}",
+    fstype  => 'iso9660',
+    options => 'ro,loop',
+    require => File[ '/tmp/vmtools' ],
+  }
+
+  exec { 'install vmtools':
+    command => $install_cmd,
+    path    => [ '/bin', '/usr/bin', ],
+    require => Mount[ '/tmp/vmtools' ],
+  }
+
+  exec { 'remove /tmp/vmtools':
+    command => 'umount /tmp/vmtools ; rmdir /tmp/vmtools',
+    path    => [ '/bin', '/usr/bin', ],
+    onlyif  => 'test -d /tmp/vmtools',
+    require => Exec[ 'install vmtools' ],
+  }
+
+  case $::operatingsystemrelease {
+
+    default: {
+      file { "${root_home}/${tools_iso}":
+        ensure  => absent,
+        require => Exec[ 'remove /tmp/vmtools' ],
+      }
+    }
+  }
+
+  file_line { "remove /etc/fstab /tmp/vmtools":
+    path    => '/etc/fstab',
+    line    => '#/tmp/vmtools removed',
+    match   => '/tmp/vmtools',
+    require => Exec[ 'remove /tmp/vmtools' ],
+  }
+
+}

data/puppet/modules/packer/manifests/vsphere/fw.pp

@@ -0,0 +1,9 @@
+class packer::vsphere::fw {
+
+  if ($::osfamily == 'RedHat')
+  and ($::operatingsystemmajrelease == '7') {
+    class { 'firewall':
+      ensure => stopped,
+    }
+  }
+}

data/puppet/modules/packer/manifests/vsphere/networking.pp

@@ -0,0 +1,29 @@
+class packer::vsphere::networking inherits packer::networking::params {
+
+  class { 'network':
+    config_file_notify => '',
+  }
+
+  case $::osfamily {
+    debian: {
+      if $::operatingsystemrelease in ['15.10', '16.04'] {
+        network::interface { 'ens32':
+          enable_dhcp   => true,
+      }
+    }
+  }
+
+    redhat: {
+      if ($::operatingsystemmajrelease == '7') {
+        if ( $interface_script != undef ) {
+          file { $interface_script:
+            ensure => absent,
+          }
+        }
+        network::interface { 'ens32':
+          enable_dhcp   => true,
+        }
+      }
+    }
+  }
+}

data/puppet/modules/packer/manifests/vsphere/params.pp

@@ -0,0 +1,56 @@
+class packer::vsphere::params {
+
+  $repo_mirror = 'http://osmirror.delivery.puppetlabs.net'
+  $loweros     = downcase($::operatingsystem)
+
+  case $::operatingsystem {
+    'Ubuntu': {
+      $startup_file          = '/etc/rc.local'
+      $startup_file_source   = 'rc.local'
+      $bootstrap_file        = '/etc/vsphere-bootstrap.rb'
+      $bootstrap_file_source = 'ubuntu.rb.erb'
+      $ruby_package          = [ 'ruby' ]
+      $repo_name             = 'ubuntu'
+      $repo_list             = 'main restricted universe multiverse'
+      $security_repo_name    = 'ubuntu'
+      $security_release      = "${lsbdistcodename}-security"
+      $updates_release       = "${lsbdistcodename}-updates"
+    }
+
+    'Debian': {
+      $startup_file          = '/etc/rc.local'
+      $startup_file_source   = 'rc.local'
+      $bootstrap_file        = '/etc/vsphere-bootstrap.rb'
+      $bootstrap_file_source = 'debian.rb.erb'
+      $ruby_package          = [ 'ruby' ]
+      $repo_name             = 'debian'
+      $repo_list             = 'main contrib non-free'
+      $security_repo_name    = 'debian-security'
+      $security_release      = "${lsbdistcodename}/updates"
+      $updates_release       = "${lsbdistcodename}-updates"
+    }
+
+    'CentOS', 'Redhat', 'Scientific': {
+      $startup_file          = '/etc/rc.d/rc.local'
+      $startup_file_source   = 'rc.local'
+      $bootstrap_file        = '/etc/vsphere-bootstrap.rb'
+      $bootstrap_file_source = 'redhat.rb.erb'
+      $ruby_package          = [ 'ruby' ]
+      $gpgkey                = "RPM-GPG-KEY-${::operatingsystem}-${::operatingsystemmajrelease}"
+    }
+
+    'Fedora': {
+      $startup_file          = '/etc/rc.d/rc.local'
+      $startup_file_source   = 'rc.local'
+      $bootstrap_file        = '/etc/vsphere-bootstrap.rb'
+      $bootstrap_file_source = 'redhat.rb.erb'
+      $ruby_package          = [ 'ruby' ]
+      $gpgkey                = "RPM-GPG-KEY-${::operatingsystemmajrelease}-${loweros}"
+    }
+
+    default: {
+      fail( "Unsupported platform: ${::osfamily}/${::operatingsystem}" )
+    }
+  }
+
+}

data/puppet/modules/packer/manifests/vsphere/repos.pp

@@ -0,0 +1,87 @@
+class packer::vsphere::repos inherits packer::vsphere::params {
+
+  case $::osfamily {
+
+    debian: {
+
+      exec { "apt-update":
+        command => "/usr/bin/apt-get update"
+      }
+
+      Apt::Key <| |> -> Exec["apt-update"]
+      Apt::Source <| |> -> Exec["apt-update"]
+
+      Exec["apt-update"] -> Package <| |>
+
+      class { 'apt':
+        purge => {
+          'sources.list'   => true,
+          'sources.list.d' => true,
+        },
+      }
+
+      apt::source { "$lsbdistcodename":
+        release  => $lsbdistcodename,
+        location => "$repo_mirror/$repo_name",
+        repos    => "$repo_list",
+        include  => {
+          'src' => true,
+          'deb' => true,
+        },
+      }
+
+      apt::source { "${lsbdistcodename}-updates":
+        release  => "$updates_release",
+        location => "${repo_mirror}/${repo_name}",
+        repos    => "$repo_list",
+        include  => {
+          'src' => true,
+          'deb' => true,
+        },
+      }
+
+      apt::source { "${lsbdistcodename}-security":
+        release  => "$security_release",
+        location => "${repo_mirror}/${security_repo_name}",
+        repos    => "$repo_list",
+        include  => {
+          'src' => true,
+          'deb' => true,
+        },
+      }
+    }
+
+    redhat: {
+
+      resources { 'yumrepo':
+        purge => true,
+      }
+
+      yumrepo { "localmirror-os":
+        descr    => "localmirror-os",
+        baseurl  => "${repo_mirror}/${loweros}-${::operatingsystemmajrelease}-${::architecture}/RPMS.os",
+        gpgcheck => "1",
+        gpgkey   => "file:///etc/pki/rpm-gpg/${gpgkey}"
+      }
+      yumrepo { "localmirror-updates":
+        descr    => "localmirror-updates",
+        baseurl  => "${repo_mirror}/${loweros}-${::operatingsystemmajrelease}-${::architecture}/RPMS.updates",
+        gpgcheck => "1",
+        gpgkey   => "file:///etc/pki/rpm-gpg/${gpgkey}"
+      }
+      
+      if $::operatingsystem == 'Fedora' {
+        yumrepo { "localmirror-everything":
+          descr    => "localmirror-everything",
+          baseurl  => "${repo_mirror}/${loweros}-${::operatingsystemmajrelease}-${::architecture}/RPMS.everything",
+          gpgcheck => "1",
+          gpgkey   => "file:///etc/pki/rpm-gpg/${gpgkey}"
+        }
+      }
+   }  
+
+   default: {
+     fail( "Unsupported platform: ${::osfamily}/${::operatingsystem}" )
+   }
+  }
+}

data/puppet/modules/packer/manifests/vsphere.pp

@@ -0,0 +1,45 @@
+class packer::vsphere inherits packer::vsphere::params {
+
+  include packer::vsphere::repos
+  include packer::vsphere::networking
+  include packer::vsphere::fw
+
+  user { root:
+    ensure   => present,
+    password => "$qa_root_passwd"
+  }
+
+  package { $ruby_package:
+    ensure => present,
+  }
+
+  file { $bootstrap_file:
+    owner  => 'root',
+    group  => 'root',
+    mode   => '0755',
+    content => template("packer/vsphere/${bootstrap_file_source}"),
+  }
+
+  file { $startup_file:
+    owner   => 'root',
+    group   => 'root',
+    mode    => '0755',
+    content => template("packer/vsphere/${startup_file_source}"),
+  }
+
+  file { '/root/.ssh':
+    owner   => 'root',
+    group   => 'root',
+    mode    => '0755',
+    ensure => directory,
+  }
+
+  file { '/root/.ssh/authorized_keys':
+    owner   => 'root',
+    group   => 'root',
+    mode    => '0755',
+    source  => 'puppet:///modules/packer/vsphere/authorized_keys',
+    require => File[ '/root/.ssh' ]
+  }
+
+}

data/puppet/modules/packer/templates/ec2/ubuntu-cloud-cfg.erb

@@ -0,0 +1,111 @@
+# The top level settings are used as module
+# and system configuration.
+
+# A set of users which may be applied and/or used by various modules
+# when a 'default' entry is found it will reference the 'default_user'
+# from the distro configuration specified below
+users:
+   - default
+
+# If this is set, 'root' will not be able to ssh in and they
+# will get a message to login instead as the above $user (ubuntu)
+disable_root: true
+
+# This will cause the set+update hostname module to not operate (if true)
+preserve_hostname: false
+
+# Example datasource config
+# datasource:
+#    Ec2:
+#      metadata_urls: [ 'blah.com' ]
+#      timeout: 5 # (defaults to 50 seconds)
+#      max_wait: 10 # (defaults to 120 seconds)
+
+# The modules that run in the 'init' stage
+cloud_init_modules:
+ - migrator
+ - seed_random
+ - bootcmd
+ - write-files
+ - growpart
+ - resizefs
+ - set_hostname
+ - update_hostname
+ - update_etc_hosts
+ - ca-certs
+ - rsyslog
+ - users-groups
+ - ssh
+
+# The modules that run in the 'config' stage
+cloud_config_modules:
+# Emit the cloud config ready event
+# this can be used by upstart jobs for 'start on cloud-config'.
+ - emit_upstart
+ - disk_setup
+ - mounts
+ - ssh-import-id
+ - locale
+ - set-passwords
+ - grub-dpkg
+ - apt-pipelining
+ - apt-configure
+ - package-update-upgrade-install
+ - landscape
+ - timezone
+ - puppet
+ - chef
+ - salt-minion
+ - mcollective
+ - disable-ec2-metadata
+ - runcmd
+ - byobu
+
+# The modules that run in the 'final' stage
+cloud_final_modules:
+ - rightscale_userdata
+ - scripts-vendor
+ - scripts-per-once
+ - scripts-per-boot
+ - scripts-per-instance
+ - scripts-user
+ - ssh-authkey-fingerprints
+ - keys-to-console
+ - phone-home
+ - final-message
+ - power-state-change
+
+# System and/or distro specific settings
+# (not accessible to handlers/transforms)
+system_info:
+   # This will affect which distro class gets used
+   distro: ubuntu
+   # Default user name + that default users groups (if added/used)
+   default_user:
+     name: <%= scope.lookupvar('::packer::ec2::local_service_acct_user') %>
+     lock_passwd: True
+     gecos: <%= scope.lookupvar('::packer::ec2::local_service_acct_gecos') %>
+     groups: [adm, audio, cdrom, dialout, dip, floppy, netdev, plugdev, sudo, video]
+     sudo: ["ALL=(ALL) NOPASSWD:ALL"]
+     shell: /bin/bash
+   # Other config here will be given to the distro class and/or path classes
+   paths:
+      cloud_dir: /var/lib/cloud/
+      templates_dir: /etc/cloud/templates/
+      upstart_dir: /etc/init/
+   package_mirrors:
+     - arches: [i386, amd64]
+       failsafe:
+         primary: http://archive.ubuntu.com/ubuntu
+         security: http://security.ubuntu.com/ubuntu
+       search:
+         primary:
+           - http://%(ec2_region)s.ec2.archive.ubuntu.com/ubuntu/
+           - http://%(availability_zone)s.clouds.archive.ubuntu.com/ubuntu/
+           - http://%(region)s.clouds.archive.ubuntu.com/ubuntu/
+         security: []
+     - arches: [armhf, armel, default]
+       failsafe:
+         primary: http://ports.ubuntu.com/ubuntu-ports
+         security: http://ports.ubuntu.com/ubuntu-ports
+   ssh_svcname: ssh

data/puppet/modules/packer/templates/vsphere/debian.rb.erb

@@ -0,0 +1,45 @@
+#!/usr/bin/ruby
+ 
+hostname = `vmtoolsd --cmd "info-get guestinfo.hostname"`
+
+hostname = hostname.chomp
+
+puts "Nice to meet you, my VM name is '#{hostname}'."
+ 
+puts "\n"
+ 
+puts '- Setting local hostname...'
+ 
+File.open('/etc/hostname', 'w') do |f|
+  f.write(hostname)
+end
+ 
+Kernel.system('hostname -F /etc/hostname')
+ 
+dhc = File.read('/etc/dhcp/dhclient.conf')
+ 
+File.open('/etc/dhcp/dhclient.conf', 'w') do |f|
+  dhc.gsub!(/^(#send host-name.*)/, "send host-name \"#{hostname}\";")
+  f.write(dhc)
+end
+ 
+puts '- Re-obtaining DHCP lease...'
+
+<% if @operatingsystemmajrelease == '6' -%>
+Kernel.system('pkill dhclient')
+Kernel.system('dhclient -r')
+Kernel.system('rm /var/lib/dhcp/dhclient*')
+Kernel.system('dhclient eth0')
+<% else -%>
+Kernel.system('/etc/init.d/networking restart')
+Kernel.system('dhclient eth0')
+<% end -%>
+ 
+puts '- Cleaning up...'
+ 
+Kernel.system('rm /etc/vsphere-bootstrap.rb')
+Kernel.system('echo "exit 0" > /etc/rc.local')
+ 
+puts "\n"
+ 
+puts 'Done!'

data/puppet/modules/packer/templates/vsphere/rc.local

@@ -0,0 +1,5 @@
+#!/bin/sh -e
+ 
+( /etc/vsphere-bootstrap.rb ) 2>&1 | /usr/bin/tee /tmp/vsphere-bootstrap.log
+ 
+exit 0