chef-dk 0.8.0 → 0.9.0

data/lib/chef-dk/skeletons/code_generator/templates/default/LICENSE.mit.erb

@@ -1,21 +1,21 @@
-The MIT License (MIT)
-
-Copyright (c) <%= year %> <%= copyright_holder %>
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.
+The MIT License (MIT)
+
+Copyright (c) <%= year %> <%= copyright_holder %>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/lib/chef-dk/skeletons/code_generator/templates/default/Policyfile.rb.erb

@@ -1,16 +1,20 @@
-# Policyfile.rb - Describe how you want Chef to build your system.
-#
-# For more information on the Policyfile feature, visit
-# https://github.com/opscode/chef-dk/blob/master/POLICYFILE_README.md
-
-# A name that describes what the system you're building with Chef does.
-name "example_application"
-
-# Where to find external cookbooks:
-default_source :community
-
-# run_list: chef-client will run these recipes in the order specified.
-run_list "cookbook::recipe", "other_cookbook::recipe"
-
-# Specify a custom source for a single cookbook:
-# cookbook "development_cookbook", path: "../cookbooks/development_cookbook"
+# Policyfile.rb - Describe how you want Chef to build your system.
+#
+# For more information on the Policyfile feature, visit
+# https://github.com/opscode/chef-dk/blob/master/POLICYFILE_README.md
+
+# A name that describes what the system you're building with Chef does.
+name "<%= policy_name %>"
+
+# Where to find external cookbooks:
+default_source :supermarket
+
+# run_list: chef-client will run these recipes in the order specified.
+run_list "<%= policy_run_list %>"
+
+# Specify a custom source for a single cookbook:
+<% if policy_local_cookbook.nil? %>
+# cookbook "example_cookbook", path: "../cookbooks/example_cookbook"
+<% else %>
+cookbook "<%= cookbook_name %>", path: "."
+<% end %>

data/lib/chef-dk/skeletons/code_generator/templates/default/README.md.erb

@@ -1,4 +1,4 @@
-# <%= cookbook_name %>
-
-TODO: Enter the cookbook description here.
-
+# <%= cookbook_name %>
+
+TODO: Enter the cookbook description here.
+

data/lib/chef-dk/skeletons/code_generator/templates/default/kitchen.yml.erb

@@ -1,16 +1,16 @@
----
-driver:
-  name: vagrant
-
-provisioner:
-  name: chef_zero
-
-platforms:
-  - name: ubuntu-14.04
-  - name: centos-7.1
-
-suites:
-  - name: default
-    run_list:
-      - recipe[<%= cookbook_name %>::default]
-    attributes:
+---
+driver:
+  name: vagrant
+
+provisioner:
+  name: chef_zero
+
+platforms:
+  - name: ubuntu-14.04
+  - name: centos-7.1
+
+suites:
+  - name: default
+    run_list:
+      - recipe[<%= cookbook_name %>::default]
+    attributes:

data/lib/chef-dk/skeletons/code_generator/templates/default/kitchen_policyfile.yml.erb

@@ -0,0 +1,27 @@
+---
+driver:
+  name: vagrant
+
+## The forwarded_port port feature lets you connect to ports on the VM guest via
+## localhost on the host.
+## see also: https://docs.vagrantup.com/v2/networking/forwarded_ports.html
+
+#  network:
+#    - ["forwarded_port", {guest: 80, host: 8080}]
+
+provisioner:
+  name: policyfile_zero
+
+## require_chef_omnibus specifies a specific chef version to install. You can
+## also set this to `true` to always use the latest version.
+## see also: https://docs.chef.io/config_yml_kitchen.html
+
+#  require_chef_omnibus: 12.5.0
+
+platforms:
+  - name: ubuntu-14.04
+  - name: centos-7.1
+
+suites:
+  - name: default
+    attributes:

data/lib/chef-dk/skeletons/code_generator/templates/default/metadata.rb.erb

@@ -1,7 +1,7 @@
-name '<%= cookbook_name %>'
-maintainer '<%= copyright_holder %>'
-maintainer_email '<%= email %>'
-license '<%= license %>'
-description 'Installs/Configures <%= cookbook_name %>'
-long_description 'Installs/Configures <%= cookbook_name %>'
-version '0.1.0'
+name '<%= cookbook_name %>'
+maintainer '<%= copyright_holder %>'
+maintainer_email '<%= email %>'
+license '<%= license %>'
+description 'Installs/Configures <%= cookbook_name %>'
+long_description 'Installs/Configures <%= cookbook_name %>'
+version '0.1.0'

data/lib/chef-dk/skeletons/code_generator/templates/default/recipe.rb.erb

@@ -1,5 +1,5 @@
-#
-# Cookbook Name:: <%= cookbook_name %>
-# Recipe:: <%= recipe_name %>
-#
-<%= license_description('#') %>
+#
+# Cookbook Name:: <%= cookbook_name %>
+# Recipe:: <%= recipe_name %>
+#
+<%= license_description('#') %>

data/lib/chef-dk/skeletons/code_generator/templates/default/recipe_spec.rb.erb

@@ -1,20 +1,20 @@
-#
-# Cookbook Name:: <%= cookbook_name %>
-# Spec:: default
-#
-<%= license_description('#') %>
-
-require 'spec_helper'
-
-describe '<%= cookbook_name %>::<%= recipe_name %>' do
-  context 'When all attributes are default, on an unspecified platform' do
-    let(:chef_run) do
-      runner = ChefSpec::ServerRunner.new
-      runner.converge(described_recipe)
-    end
-
-    it 'converges successfully' do
-      expect { chef_run }.to_not raise_error
-    end
-  end
-end
+#
+# Cookbook Name:: <%= cookbook_name %>
+# Spec:: default
+#
+<%= license_description('#') %>
+
+require 'spec_helper'
+
+describe '<%= cookbook_name %>::<%= recipe_name %>' do
+  context 'When all attributes are default, on an unspecified platform' do
+    let(:chef_run) do
+      runner = ChefSpec::ServerRunner.new
+      runner.converge(described_recipe)
+    end
+
+    it 'converges successfully' do
+      expect { chef_run }.to_not raise_error
+    end
+  end
+end

data/lib/chef-dk/skeletons/code_generator/templates/default/repo/gitignore.erb

@@ -1,11 +1,11 @@
-.rake_test_cache
-
-###
-# Ignore Chef key files and secrets
-###
-.chef/*.pem
-.chef/encrypted_data_bag_secret
-<%- if policy_only -%>
-cookbooks/**
-!cookbooks/README.md
-<%- end -%>
+.rake_test_cache
+
+###
+# Ignore Chef key files and secrets
+###
+.chef/*.pem
+.chef/encrypted_data_bag_secret
+<%- if policy_only -%>
+cookbooks/**
+!cookbooks/README.md
+<%- end -%>

data/lib/chef-dk/skeletons/code_generator/templates/default/serverspec_default_spec.rb.erb

@@ -1,9 +1,9 @@
-require 'spec_helper'
-
-describe '<%= cookbook_name %>::default' do
-  # Serverspec examples can be found at
-  # http://serverspec.org/resource_types.html
-  it 'does something' do
-    skip 'Replace this with meaningful tests'
-  end
-end
+require 'spec_helper'
+
+describe '<%= cookbook_name %>::default' do
+  # Serverspec examples can be found at
+  # http://serverspec.org/resource_types.html
+  it 'does something' do
+    skip 'Replace this with meaningful tests'
+  end
+end

data/lib/chef-dk/ui.rb

@@ -1,58 +1,58 @@
-#
-# Copyright:: Copyright (c) 2014 Chef Software Inc.
-# License:: Apache License, Version 2.0
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-
-module ChefDK
-  class UI
-
-    class NullStream
-
-      def puts(*anything)
-        nil
-      end
-
-      def print(*anything)
-        nil
-      end
-
-    end
-
-    def self.null
-      new(out: NullStream.new, err: NullStream.new)
-    end
-
-    attr_reader :out_stream
-    attr_reader :err_stream
-
-    def initialize(out: nil, err: nil)
-      @out_stream = out || $stdout
-      @err_stream = err || $stderr
-    end
-
-    def err(message)
-      @err_stream.puts(message)
-    end
-
-    def msg(message)
-      @out_stream.puts(message)
-    end
-
-    def print(message)
-      @out_stream.print(message)
-    end
-  end
-end
-
+#
+# Copyright:: Copyright (c) 2014 Chef Software Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+module ChefDK
+  class UI
+
+    class NullStream
+
+      def puts(*anything)
+        nil
+      end
+
+      def print(*anything)
+        nil
+      end
+
+    end
+
+    def self.null
+      new(out: NullStream.new, err: NullStream.new)
+    end
+
+    attr_reader :out_stream
+    attr_reader :err_stream
+
+    def initialize(out: nil, err: nil)
+      @out_stream = out || $stdout
+      @err_stream = err || $stderr
+    end
+
+    def err(message)
+      @err_stream.puts(message)
+    end
+
+    def msg(message)
+      @out_stream.puts(message)
+    end
+
+    def print(message)
+      @out_stream.print(message)
+    end
+  end
+end
+

data/lib/chef-dk/version.rb

@@ -1,20 +1,20 @@
-#
-# Copyright:: Copyright (c) 2014 Chef Software Inc.
-# License:: Apache License, Version 2.0
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-
-module ChefDK
-  VERSION = "0.8.0"
-end
+#
+# Copyright:: Copyright (c) 2014 Chef Software Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+module ChefDK
+  VERSION = "0.9.0"
+end

data/lib/kitchen/provisioner/policyfile_zero.rb

@@ -1,164 +1,193 @@
-# -*- encoding: utf-8 -*-
-#
-# Author:: Fletcher Nichol (<fnichol@nichol.ca>)
-#
-# Copyright (C) 2013, Fletcher Nichol
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#    http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-require "kitchen/provisioner/chef_base"
-
-# TODO: chef-dk and kitchen can only co-exist if kitchen and chef-dk agree on
-# the version of mixlib-shellout to use. Kitchen currently locked at 1.4,
-# chef-dk is on 2.x
-require 'chef-dk/policyfile_services/export_repo'
-
-module Kitchen
-
-  module Provisioner
-
-    # Policyfile + Chef Zero provisioner.
-    #
-    # @author Daniel DeLeo <dan@chef.io>
-    class PolicyfileZero < ChefBase
-
-      # This provsioner will forcibly set the following config options:
-      # * `use_policyfile`: `true`
-      # * `versioned_cookbooks`: `true`
-      # * `deployment_group`: `POLICY_NAME-local`
-      # Since it makes no sense to modify these, they are hardcoded elsewhere.
-      default_config :client_rb, {}
-      default_config :json_attributes, true
-      default_config :chef_zero_host, nil
-      default_config :chef_zero_port, 8889
-      default_config :policyfile, "Policyfile.rb"
-
-      default_config :chef_client_path do |provisioner|
-        provisioner.
-          remote_path_join(%W[#{provisioner[:chef_omnibus_root]} bin chef-client]).
-          tap { |path| path.concat(".bat") if provisioner.windows_os? }
-      end
-
-      default_config :ruby_bindir do |provisioner|
-        provisioner.
-          remote_path_join(%W[#{provisioner[:chef_omnibus_root]} embedded bin])
-      end
-
-      # Emit a warning that Policyfile stuff is still experimental.
-      #
-      # (see Base#finalize_config!)
-      def finalize_config!(*args)
-        super
-        banner("Using experimental policyfile mode for chef-client")
-        warn("The Policyfile feature is under active development.")
-        warn("For best results, always use the latest chef-client version")
-      end
-
-      # (see Base#create_sandbox)
-      def create_sandbox
-        super
-        prepare_cookbooks
-        prepare_validation_pem
-        prepare_client_rb
-      end
-
-      # (see Base#run_command)
-      def run_command
-        level = config[:log_level] == :info ? :auto : config[:log_level]
-        chef_client_bin = sudo(config[:chef_client_path])
-
-        cmd = "#{chef_client_bin} --local-mode"
-        args = [
-          "--config #{config[:root_path]}/client.rb",
-          "--log_level #{level}",
-          "--force-formatter",
-          "--no-color"
-        ]
-        if config[:chef_zero_port]
-          args <<  "--chef-zero-port #{config[:chef_zero_port]}"
-        end
-        if config[:log_file]
-          args << "--logfile #{config[:log_file]}"
-        end
-
-        wrap_shell_code(
-          [cmd, *args].join(" ").
-          tap { |str| str.insert(0, reload_ps1_path) if windows_os? }
-        )
-      end
-
-      private
-
-      # Overrides behavior of parent class so that dna.json isn't created; we
-      # don't need it.
-      #
-      # @api private
-      def prepare_json
-      end
-
-      # Copies the policyfile's cookbooks to the sandbox.
-      #
-      # @api private
-      def prepare_cookbooks
-        Kitchen.mutex.synchronize do
-          policy_exporter.run
-        end
-      end
-
-      # An instance of ChefDK::PolicyfileServices::ExportRepo, configured with
-      # the sandbox path. Calling `#run` on this copies the cookbooks to the
-      # sandbox. Calling `#policy_name` returns the policy's name.
-      #
-      # @api private
-      def policy_exporter
-        # Must force this because TK by default copies the current cookbook to the sandbox
-        # See ChefDK::PolicyfileServices::ExportRepo#assert_export_dir_clean!
-        @policy_exporter ||= ChefDK::PolicyfileServices::ExportRepo.new(policyfile: config[:policyfile],
-                                                                        export_dir: sandbox_path,
-                                                                        force: true)
-      end
-
-      # Writes a fake (but valid) validation.pem into the sandbox directory.
-      #
-      # @api private
-      def prepare_validation_pem
-        info("Preparing validation.pem")
-        debug("Using a dummy validation.pem")
-
-        source = File.join(Kitchen.source_root, %w[support dummy-validation.pem])
-        FileUtils.cp(source, File.join(sandbox_path, "validation.pem"))
-      end
-
-      # Writes a client.rb configuration file to the sandbox directory.
-      #
-      # @api private
-      def prepare_client_rb
-        data = default_config_rb.merge(config[:client_rb])
-
-        data["use_policyfile"] = true
-        data["versioned_cookbooks"] = true
-        data["deployment_group"] = "#{policy_exporter.policy_name}-local"
-        # TODO this will need to be updated when chef-zero supports erchef paths (policy_group vs policies)
-        data["policy_document_native_api"] = false
-
-        info("Preparing client.rb")
-        debug("Creating client.rb from #{data.inspect}")
-
-        File.open(File.join(sandbox_path, "client.rb"), "wb") do |file|
-          file.write(format_config_file(data))
-        end
-      end
-
-    end
-  end
-end
+# -*- encoding: utf-8 -*-
+#
+# Author:: Fletcher Nichol (<fnichol@nichol.ca>)
+#
+# Copyright (C) 2013, Fletcher Nichol
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+require "kitchen/provisioner/chef_base"
+
+# TODO: chef-dk and kitchen can only co-exist if kitchen and chef-dk agree on
+# the version of mixlib-shellout to use. Kitchen currently locked at 1.4,
+# chef-dk is on 2.x
+require 'chef-dk/policyfile_services/export_repo'
+
+module Kitchen
+
+  module Provisioner
+
+    class Base
+
+      # PolicyfileZero needs to access the base behavior of creating the
+      # sandbox directory without invoking the behavior of
+      # ChefBase#create_sandbox, because that will trigger the use of
+      # Chef::CommonSandbox, which we need to override.
+      alias_method :create_sandbox_directory, :create_sandbox
+
+    end
+
+    class PolicyfileSandbox < Chef::CommonSandbox
+
+      # Stub #prepare_cookbooks because we have implemented this in the
+      # provisioner, below. If a Berksfile is present, the default
+      # implementation will try to run Berkshelf, which can lead to dependency
+      # issues since berks is not yet using Solve 2.x. See also
+      # PolicyfileZero#load_needed_dependencies! which is stubbed to prevent
+      # berks from loading.
+      def prepare_cookbooks
+      end
+
+    end
+
+    # Policyfile + Chef Zero provisioner.
+    #
+    # @author Daniel DeLeo <dan@chef.io>
+    class PolicyfileZero < ChefBase
+
+      # This provsioner will forcibly set the following config options:
+      # * `use_policyfile`: `true`
+      # * `versioned_cookbooks`: `true`
+      # * `deployment_group`: `POLICY_NAME-local`
+      # Since it makes no sense to modify these, they are hardcoded elsewhere.
+      default_config :client_rb, {}
+      default_config :json_attributes, true
+      default_config :chef_zero_host, nil
+      default_config :chef_zero_port, 8889
+      default_config :policyfile, "Policyfile.rb"
+
+      default_config :chef_client_path do |provisioner|
+        provisioner.
+          remote_path_join(%W[#{provisioner[:chef_omnibus_root]} bin chef-client]).
+          tap { |path| path.concat(".bat") if provisioner.windows_os? }
+      end
+
+      default_config :ruby_bindir do |provisioner|
+        provisioner.
+          remote_path_join(%W[#{provisioner[:chef_omnibus_root]} embedded bin])
+      end
+
+      # Emit a warning that Policyfile stuff is still experimental.
+      #
+      # (see Base#finalize_config!)
+      def finalize_config!(*args)
+        super
+        banner("Using experimental policyfile mode for chef-client")
+        warn("The Policyfile feature is under active development.")
+        warn("For best results, always use the latest chef-client version")
+      end
+
+      # (see Base#create_sandbox)
+      def create_sandbox
+        create_sandbox_directory
+        PolicyfileSandbox.new(config, sandbox_path, instance).populate
+        prepare_cookbooks
+        prepare_validation_pem
+        prepare_client_rb
+      end
+
+      # (see Base#run_command)
+      def run_command
+        level = config[:log_level] == :info ? :auto : config[:log_level]
+        chef_client_bin = sudo(config[:chef_client_path])
+
+        cmd = "#{chef_client_bin} --local-mode"
+        args = [
+          "--config #{config[:root_path]}/client.rb",
+          "--log_level #{level}",
+          "--force-formatter",
+          "--no-color"
+        ]
+        if config[:chef_zero_port]
+          args <<  "--chef-zero-port #{config[:chef_zero_port]}"
+        end
+        if config[:log_file]
+          args << "--logfile #{config[:log_file]}"
+        end
+
+        wrap_shell_code(
+          [cmd, *args].join(" ").
+          tap { |str| str.insert(0, reload_ps1_path) if windows_os? }
+        )
+      end
+
+      # We don't want to load Berkshelf or Librarian; Policyfile is managing
+      # dependencies, so these can only cause trouble.
+      def load_needed_dependencies!
+      end
+
+      private
+
+      # Overrides behavior of parent class so that dna.json isn't created; we
+      # don't need it.
+      #
+      # @api private
+      def prepare_json
+      end
+
+      # Copies the policyfile's cookbooks to the sandbox.
+      #
+      # @api private
+      def prepare_cookbooks
+        Kitchen.mutex.synchronize do
+          policy_exporter.run
+        end
+      end
+
+      # An instance of ChefDK::PolicyfileServices::ExportRepo, configured with
+      # the sandbox path. Calling `#run` on this copies the cookbooks to the
+      # sandbox. Calling `#policy_name` returns the policy's name.
+      #
+      # @api private
+      def policy_exporter
+        # Must force this because TK by default copies the current cookbook to the sandbox
+        # See ChefDK::PolicyfileServices::ExportRepo#assert_export_dir_clean!
+        @policy_exporter ||= ChefDK::PolicyfileServices::ExportRepo.new(policyfile: config[:policyfile],
+                                                                        export_dir: sandbox_path,
+                                                                        force: true)
+      end
+
+      # Writes a fake (but valid) validation.pem into the sandbox directory.
+      #
+      # @api private
+      def prepare_validation_pem
+        info("Preparing validation.pem")
+        debug("Using a dummy validation.pem")
+
+        source = File.join(Kitchen.source_root, %w[support dummy-validation.pem])
+        FileUtils.cp(source, File.join(sandbox_path, "validation.pem"))
+      end
+
+      # Writes a client.rb configuration file to the sandbox directory.
+      #
+      # @api private
+      def prepare_client_rb
+        data = default_config_rb.merge(config[:client_rb])
+
+        data["use_policyfile"] = true
+        data["versioned_cookbooks"] = true
+        data["deployment_group"] = "#{policy_exporter.policy_name}-local"
+        # TODO this will need to be updated when chef-zero supports erchef paths (policy_group vs policies)
+        data["policy_document_native_api"] = false
+
+        info("Preparing client.rb")
+        debug("Creating client.rb from #{data.inspect}")
+
+        File.open(File.join(sandbox_path, "client.rb"), "wb") do |file|
+          file.write(format_config_file(data))
+        end
+      end
+
+    end
+  end
+end