chef 15.0.300-universal-mingw32 → 15.1.36-universal-mingw32

data/lib/chef/provider/template.rb

@@ -1,59 +1,59 @@
-#--
-# Author:: Adam Jacob (<adam@chef.io>)
-# Author:: Daniel DeLeo (<dan@chef.io>)
-# Copyright:: Copyright 2008-2016, Chef Software Inc.
-# License:: Apache License, Version 2.0
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-
-require_relative "template_finder"
-require_relative "file"
-
-class Chef
-  class Provider
-    class Template < Chef::Provider::File
-      provides :template
-
-      def initialize(new_resource, run_context)
-        @content_class = Chef::Provider::Template::Content
-        super
-      end
-
-      def load_current_resource
-        @current_resource = Chef::Resource::Template.new(new_resource.name)
-        super
-      end
-
-      def define_resource_requirements
-        super
-
-        requirements.assert(:create, :create_if_missing) do |a|
-          a.assertion { ::File.exists?(content.template_location) }
-          a.failure_message "Template source #{content.template_location} could not be found."
-          a.whyrun "Template source #{content.template_location} does not exist. Assuming it would have been created."
-          a.block_action!
-        end
-      end
-
-      private
-
-      def managing_content?
-        return true if new_resource.checksum
-        return true if !new_resource.source.nil? && @action != :create_if_missing
-        false
-      end
-
-    end
-  end
-end
+#--
+# Author:: Adam Jacob (<adam@chef.io>)
+# Author:: Daniel DeLeo (<dan@chef.io>)
+# Copyright:: Copyright 2008-2016, Chef Software Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require_relative "template_finder"
+require_relative "file"
+
+class Chef
+  class Provider
+    class Template < Chef::Provider::File
+      provides :template
+
+      def initialize(new_resource, run_context)
+        @content_class = Chef::Provider::Template::Content
+        super
+      end
+
+      def load_current_resource
+        @current_resource = Chef::Resource::Template.new(new_resource.name)
+        super
+      end
+
+      def define_resource_requirements
+        super
+
+        requirements.assert(:create, :create_if_missing) do |a|
+          a.assertion { ::File.exists?(content.template_location) }
+          a.failure_message "Template source #{content.template_location} could not be found."
+          a.whyrun "Template source #{content.template_location} does not exist. Assuming it would have been created."
+          a.block_action!
+        end
+      end
+
+      private
+
+      def managing_content?
+        return true if new_resource.checksum
+        return true if !new_resource.source.nil? && @action != :create_if_missing
+        false
+      end
+
+    end
+  end
+end

data/lib/chef/provider/template/content.rb

@@ -1,93 +1,93 @@
-#
-# Author:: Lamont Granquist (<lamont@chef.io>)
-# Copyright:: Copyright 2013-2016, Chef Software Inc.
-# License:: Apache License, Version 2.0
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-
-require_relative "../../mixin/template"
-require_relative "../../file_content_management/content_base"
-
-class Chef
-  class Provider
-    class Template
-
-      class Content < Chef::FileContentManagement::ContentBase
-
-        include Chef::Mixin::Template
-
-        def template_location
-          @template_file_cache_location ||= begin
-            template_finder.find(new_resource.source, local: new_resource.local, cookbook: new_resource.cookbook)
-          end
-        end
-
-        private
-
-        def file_for_provider
-          # Deal with any DelayedEvaluator values in the template variables.
-          visitor = lambda do |obj|
-            case obj
-            when Hash
-              # If this is an Attribute object, we need to change class otherwise
-              # we get the immutable behavior. This could probably be fixed by
-              # using Hash#transform_values once we only support Ruby 2.4.
-              obj_class = obj.is_a?(Chef::Node::ImmutableMash) ? Mash : obj.class
-              # Avoid mutating hashes in the resource in case we're changing anything.
-              obj.each_with_object(obj_class.new) do |(key, value), memo|
-                memo[key] = visitor.call(value)
-              end
-            when Array
-              # Avoid mutating arrays in the resource in case we're changing anything.
-              obj.map { |value| visitor.call(value) }
-            when DelayedEvaluator
-              new_resource.instance_eval(&obj)
-            else
-              obj
-            end
-          end
-          variables = visitor.call(new_resource.variables)
-
-          context = TemplateContext.new(variables)
-          context[:node] = run_context.node
-          context[:template_finder] = template_finder
-
-          # helper variables
-          context[:cookbook_name] = new_resource.cookbook_name unless context.keys.include?(:coookbook_name)
-          context[:recipe_name] = new_resource.recipe_name unless context.keys.include?(:recipe_name)
-          context[:recipe_line_string] = new_resource.source_line unless context.keys.include?(:recipe_line_string)
-          context[:recipe_path] = new_resource.source_line_file unless context.keys.include?(:recipe_path)
-          context[:recipe_line] = new_resource.source_line_number unless context.keys.include?(:recipe_line)
-          context[:template_name] = new_resource.source unless context.keys.include?(:template_name)
-          context[:template_path] = template_location unless context.keys.include?(:template_path)
-
-          context._extend_modules(new_resource.helper_modules)
-          output = context.render_template(template_location)
-
-          tempfile = Chef::FileContentManagement::Tempfile.new(new_resource).tempfile
-          tempfile.binmode
-          tempfile.write(output)
-          tempfile.close
-          tempfile
-        end
-
-        def template_finder
-          @template_finder ||= begin
-            TemplateFinder.new(run_context, new_resource.cookbook_name, run_context.node)
-          end
-        end
-      end
-    end
-  end
-end
+#
+# Author:: Lamont Granquist (<lamont@chef.io>)
+# Copyright:: Copyright 2013-2016, Chef Software Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require_relative "../../mixin/template"
+require_relative "../../file_content_management/content_base"
+
+class Chef
+  class Provider
+    class Template
+
+      class Content < Chef::FileContentManagement::ContentBase
+
+        include Chef::Mixin::Template
+
+        def template_location
+          @template_file_cache_location ||= begin
+            template_finder.find(new_resource.source, local: new_resource.local, cookbook: new_resource.cookbook)
+          end
+        end
+
+        private
+
+        def file_for_provider
+          # Deal with any DelayedEvaluator values in the template variables.
+          visitor = lambda do |obj|
+            case obj
+            when Hash
+              # If this is an Attribute object, we need to change class otherwise
+              # we get the immutable behavior. This could probably be fixed by
+              # using Hash#transform_values once we only support Ruby 2.4.
+              obj_class = obj.is_a?(Chef::Node::ImmutableMash) ? Mash : obj.class
+              # Avoid mutating hashes in the resource in case we're changing anything.
+              obj.each_with_object(obj_class.new) do |(key, value), memo|
+                memo[key] = visitor.call(value)
+              end
+            when Array
+              # Avoid mutating arrays in the resource in case we're changing anything.
+              obj.map { |value| visitor.call(value) }
+            when DelayedEvaluator
+              new_resource.instance_eval(&obj)
+            else
+              obj
+            end
+          end
+          variables = visitor.call(new_resource.variables)
+
+          context = TemplateContext.new(variables)
+          context[:node] = run_context.node
+          context[:template_finder] = template_finder
+
+          # helper variables
+          context[:cookbook_name] = new_resource.cookbook_name unless context.keys.include?(:coookbook_name)
+          context[:recipe_name] = new_resource.recipe_name unless context.keys.include?(:recipe_name)
+          context[:recipe_line_string] = new_resource.source_line unless context.keys.include?(:recipe_line_string)
+          context[:recipe_path] = new_resource.source_line_file unless context.keys.include?(:recipe_path)
+          context[:recipe_line] = new_resource.source_line_number unless context.keys.include?(:recipe_line)
+          context[:template_name] = new_resource.source unless context.keys.include?(:template_name)
+          context[:template_path] = template_location unless context.keys.include?(:template_path)
+
+          context._extend_modules(new_resource.helper_modules)
+          output = context.render_template(template_location)
+
+          tempfile = Chef::FileContentManagement::Tempfile.new(new_resource).tempfile
+          tempfile.binmode
+          tempfile.write(output)
+          tempfile.close
+          tempfile
+        end
+
+        def template_finder
+          @template_finder ||= begin
+            TemplateFinder.new(run_context, new_resource.cookbook_name, run_context.node)
+          end
+        end
+      end
+    end
+  end
+end

data/lib/chef/provider/template_finder.rb

@@ -1,62 +1,62 @@
-#--
-# Author:: Andrea Campi (<andrea.campi@zephirworks.com>)
-# Copyright:: Copyright 2012-2016, Chef Software Inc.
-# License:: Apache License, Version 2.0
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-
-class Chef
-  class Provider
-
-    class TemplateFinder
-
-      def initialize(run_context, cookbook_name, node)
-        @run_context = run_context
-        @cookbook_name = cookbook_name
-        @node = node
-      end
-
-      def find(template_name, options = {})
-        template_name = template_source_name(template_name, options)
-
-        if options[:local]
-          return template_name
-        end
-
-        cookbook_name = find_cookbook_name(options)
-        cookbook = @run_context.cookbook_collection[cookbook_name]
-
-        cookbook.preferred_filename_on_disk_location(@node, :templates, template_name)
-      end
-
-      protected
-
-      def template_source_name(name, options)
-        if options[:source]
-          options[:source]
-        else
-          name
-        end
-      end
-
-      def find_cookbook_name(options)
-        if options[:cookbook]
-          options[:cookbook]
-        else
-          @cookbook_name
-        end
-      end
-    end
-  end
-end
+#--
+# Author:: Andrea Campi (<andrea.campi@zephirworks.com>)
+# Copyright:: Copyright 2012-2016, Chef Software Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+class Chef
+  class Provider
+
+    class TemplateFinder
+
+      def initialize(run_context, cookbook_name, node)
+        @run_context = run_context
+        @cookbook_name = cookbook_name
+        @node = node
+      end
+
+      def find(template_name, options = {})
+        template_name = template_source_name(template_name, options)
+
+        if options[:local]
+          return template_name
+        end
+
+        cookbook_name = find_cookbook_name(options)
+        cookbook = @run_context.cookbook_collection[cookbook_name]
+
+        cookbook.preferred_filename_on_disk_location(@node, :templates, template_name)
+      end
+
+      protected
+
+      def template_source_name(name, options)
+        if options[:source]
+          options[:source]
+        else
+          name
+        end
+      end
+
+      def find_cookbook_name(options)
+        if options[:cookbook]
+          options[:cookbook]
+        else
+          @cookbook_name
+        end
+      end
+    end
+  end
+end

data/lib/chef/provider/user.rb

@@ -1,221 +1,221 @@
-#
-# Author:: Adam Jacob (<adam@chef.io>)
-# Copyright:: Copyright 2008-2018, Chef Software Inc.
-# License:: Apache License, Version 2.0
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-
-require_relative "../provider"
-require "etc"
-
-class Chef
-  class Provider
-    class User < Chef::Provider
-
-      attr_accessor :user_exists, :locked
-
-      def initialize(new_resource, run_context)
-        super
-        @user_exists = true
-        @locked = nil
-        @shadow_lib_ok = true
-        @group_name_resolved = true
-      end
-
-      def convert_group_name
-        if new_resource.gid.is_a? String
-          new_resource.gid(Etc.getgrnam(new_resource.gid).gid)
-        end
-      rescue ArgumentError
-        @group_name_resolved = false
-      end
-
-      def load_current_resource
-        @current_resource = Chef::Resource::User.new(new_resource.name)
-        current_resource.username(new_resource.username)
-
-        begin
-          user_info = Etc.getpwnam(new_resource.username)
-        rescue ArgumentError
-          @user_exists = false
-          logger.trace("#{new_resource} user does not exist")
-          user_info = nil
-        end
-
-        if user_info
-          current_resource.uid(user_info.uid)
-          current_resource.gid(user_info.gid)
-          current_resource.home(user_info.dir)
-          current_resource.shell(user_info.shell)
-          current_resource.password(user_info.passwd)
-
-          if new_resource.comment
-            user_info.gecos.force_encoding(new_resource.comment.encoding)
-          end
-          current_resource.comment(user_info.gecos)
-
-          if new_resource.password && current_resource.password == "x"
-            begin
-              require "shadow"
-            rescue LoadError
-              @shadow_lib_ok = false
-            else
-              shadow_info = Shadow::Passwd.getspnam(new_resource.username)
-              current_resource.password(shadow_info.sp_pwdp)
-            end
-          end
-
-          convert_group_name if new_resource.gid
-        end
-
-        current_resource
-      end
-
-      def define_resource_requirements
-        requirements.assert(:create, :modify, :manage, :lock, :unlock) do |a|
-          a.assertion { @group_name_resolved }
-          a.failure_message Chef::Exceptions::User, "Couldn't lookup integer GID for group name #{new_resource.gid}"
-          a.whyrun "group name #{new_resource.gid} does not exist.  This will cause group assignment to fail.  Assuming this group will have been created previously."
-        end
-        requirements.assert(:all_actions) do |a|
-          a.assertion { @shadow_lib_ok }
-          a.failure_message Chef::Exceptions::MissingLibrary, "You must have ruby-shadow installed for password support!"
-          a.whyrun "ruby-shadow is not installed. Attempts to set user password will cause failure.  Assuming that this gem will have been previously installed." \
-            "Note that user update converge may report false-positive on the basis of mismatched password. "
-        end
-        requirements.assert(:modify, :lock, :unlock) do |a|
-          a.assertion { @user_exists }
-          a.failure_message(Chef::Exceptions::User, "Cannot modify user #{new_resource.username} - does not exist!")
-          a.whyrun("Assuming user #{new_resource.username} would have been created")
-        end
-      end
-
-      # Check to see if the user needs any changes
-      #
-      # === Returns
-      # <true>:: If a change is required
-      # <false>:: If the users are identical
-      def compare_user
-        return true if !new_resource.home.nil? && Pathname.new(new_resource.home).cleanpath != Pathname.new(current_resource.home).cleanpath
-
-        [ :comment, :shell, :password, :uid, :gid ].each do |user_attrib|
-          return true if !new_resource.send(user_attrib).nil? && new_resource.send(user_attrib).to_s != current_resource.send(user_attrib).to_s
-        end
-
-        false
-      end
-
-      def action_create
-        if !@user_exists
-          converge_by("create user #{new_resource.username}") do
-            create_user
-            logger.info("#{new_resource} created")
-          end
-        elsif compare_user
-          converge_by("alter user #{new_resource.username}") do
-            manage_user
-            logger.info("#{new_resource} altered")
-          end
-        end
-      end
-
-      def action_remove
-        return unless @user_exists
-        converge_by("remove user #{new_resource.username}") do
-          remove_user
-          logger.info("#{new_resource} removed")
-        end
-      end
-
-      def action_manage
-        return unless @user_exists && compare_user
-        converge_by("manage user #{new_resource.username}") do
-          manage_user
-          logger.info("#{new_resource} managed")
-        end
-      end
-
-      def action_modify
-        return unless compare_user
-        converge_by("modify user #{new_resource.username}") do
-          manage_user
-          logger.info("#{new_resource} modified")
-        end
-      end
-
-      def action_lock
-        if check_lock == false
-          converge_by("lock the user #{new_resource.username}") do
-            lock_user
-            logger.info("#{new_resource} locked")
-          end
-        else
-          logger.trace("#{new_resource} already locked - nothing to do")
-        end
-      end
-
-      def action_unlock
-        if check_lock == true
-          converge_by("unlock user #{new_resource.username}") do
-            unlock_user
-            logger.info("#{new_resource} unlocked")
-          end
-        else
-          logger.trace("#{new_resource} already unlocked - nothing to do")
-        end
-      end
-
-      def create_user
-        raise NotImplementedError
-      end
-
-      def remove_user
-        raise NotImplementedError
-      end
-
-      def manage_user
-        raise NotImplementedError
-      end
-
-      def lock_user
-        raise NotImplementedError
-      end
-
-      def unlock_user
-        raise NotImplementedError
-      end
-
-      def check_lock
-        raise NotImplementedError
-      end
-
-      private
-
-      #
-      # helpers for subclasses
-      #
-
-      def should_set?(sym)
-        current_resource.send(sym).to_s != new_resource.send(sym).to_s && new_resource.send(sym)
-      end
-
-      def updating_home?
-        return false if new_resource.home.nil?
-        return true if current_resource.home.nil?
-        # Pathname#cleanpath matches more edge conditions than File.expand_path()
-        new_resource.home && Pathname.new(current_resource.home).cleanpath != Pathname.new(new_resource.home).cleanpath
-      end
-    end
-  end
-end
+#
+# Author:: Adam Jacob (<adam@chef.io>)
+# Copyright:: Copyright 2008-2018, Chef Software Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require_relative "../provider"
+require "etc" unless defined?(Etc)
+
+class Chef
+  class Provider
+    class User < Chef::Provider
+
+      attr_accessor :user_exists, :locked
+
+      def initialize(new_resource, run_context)
+        super
+        @user_exists = true
+        @locked = nil
+        @shadow_lib_ok = true
+        @group_name_resolved = true
+      end
+
+      def convert_group_name
+        if new_resource.gid.is_a? String
+          new_resource.gid(Etc.getgrnam(new_resource.gid).gid)
+        end
+      rescue ArgumentError
+        @group_name_resolved = false
+      end
+
+      def load_current_resource
+        @current_resource = Chef::Resource::User.new(new_resource.name)
+        current_resource.username(new_resource.username)
+
+        begin
+          user_info = Etc.getpwnam(new_resource.username)
+        rescue ArgumentError
+          @user_exists = false
+          logger.trace("#{new_resource} user does not exist")
+          user_info = nil
+        end
+
+        if user_info
+          current_resource.uid(user_info.uid)
+          current_resource.gid(user_info.gid)
+          current_resource.home(user_info.dir)
+          current_resource.shell(user_info.shell)
+          current_resource.password(user_info.passwd)
+
+          if new_resource.comment
+            user_info.gecos.force_encoding(new_resource.comment.encoding)
+          end
+          current_resource.comment(user_info.gecos)
+
+          if new_resource.password && current_resource.password == "x"
+            begin
+              require "shadow"
+            rescue LoadError
+              @shadow_lib_ok = false
+            else
+              shadow_info = Shadow::Passwd.getspnam(new_resource.username)
+              current_resource.password(shadow_info.sp_pwdp)
+            end
+          end
+
+          convert_group_name if new_resource.gid
+        end
+
+        current_resource
+      end
+
+      def define_resource_requirements
+        requirements.assert(:create, :modify, :manage, :lock, :unlock) do |a|
+          a.assertion { @group_name_resolved }
+          a.failure_message Chef::Exceptions::User, "Couldn't lookup integer GID for group name #{new_resource.gid}"
+          a.whyrun "group name #{new_resource.gid} does not exist.  This will cause group assignment to fail.  Assuming this group will have been created previously."
+        end
+        requirements.assert(:all_actions) do |a|
+          a.assertion { @shadow_lib_ok }
+          a.failure_message Chef::Exceptions::MissingLibrary, "You must have ruby-shadow installed for password support!"
+          a.whyrun "ruby-shadow is not installed. Attempts to set user password will cause failure.  Assuming that this gem will have been previously installed." \
+            "Note that user update converge may report false-positive on the basis of mismatched password. "
+        end
+        requirements.assert(:modify, :lock, :unlock) do |a|
+          a.assertion { @user_exists }
+          a.failure_message(Chef::Exceptions::User, "Cannot modify user #{new_resource.username} - does not exist!")
+          a.whyrun("Assuming user #{new_resource.username} would have been created")
+        end
+      end
+
+      # Check to see if the user needs any changes
+      #
+      # === Returns
+      # <true>:: If a change is required
+      # <false>:: If the users are identical
+      def compare_user
+        return true if !new_resource.home.nil? && Pathname.new(new_resource.home).cleanpath != Pathname.new(current_resource.home).cleanpath
+
+        [ :comment, :shell, :password, :uid, :gid ].each do |user_attrib|
+          return true if !new_resource.send(user_attrib).nil? && new_resource.send(user_attrib).to_s != current_resource.send(user_attrib).to_s
+        end
+
+        false
+      end
+
+      def action_create
+        if !@user_exists
+          converge_by("create user #{new_resource.username}") do
+            create_user
+            logger.info("#{new_resource} created")
+          end
+        elsif compare_user
+          converge_by("alter user #{new_resource.username}") do
+            manage_user
+            logger.info("#{new_resource} altered")
+          end
+        end
+      end
+
+      def action_remove
+        return unless @user_exists
+        converge_by("remove user #{new_resource.username}") do
+          remove_user
+          logger.info("#{new_resource} removed")
+        end
+      end
+
+      def action_manage
+        return unless @user_exists && compare_user
+        converge_by("manage user #{new_resource.username}") do
+          manage_user
+          logger.info("#{new_resource} managed")
+        end
+      end
+
+      def action_modify
+        return unless compare_user
+        converge_by("modify user #{new_resource.username}") do
+          manage_user
+          logger.info("#{new_resource} modified")
+        end
+      end
+
+      def action_lock
+        if check_lock == false
+          converge_by("lock the user #{new_resource.username}") do
+            lock_user
+            logger.info("#{new_resource} locked")
+          end
+        else
+          logger.trace("#{new_resource} already locked - nothing to do")
+        end
+      end
+
+      def action_unlock
+        if check_lock == true
+          converge_by("unlock user #{new_resource.username}") do
+            unlock_user
+            logger.info("#{new_resource} unlocked")
+          end
+        else
+          logger.trace("#{new_resource} already unlocked - nothing to do")
+        end
+      end
+
+      def create_user
+        raise NotImplementedError
+      end
+
+      def remove_user
+        raise NotImplementedError
+      end
+
+      def manage_user
+        raise NotImplementedError
+      end
+
+      def lock_user
+        raise NotImplementedError
+      end
+
+      def unlock_user
+        raise NotImplementedError
+      end
+
+      def check_lock
+        raise NotImplementedError
+      end
+
+      private
+
+      #
+      # helpers for subclasses
+      #
+
+      def should_set?(sym)
+        current_resource.send(sym).to_s != new_resource.send(sym).to_s && new_resource.send(sym)
+      end
+
+      def updating_home?
+        return false if new_resource.home.nil?
+        return true if current_resource.home.nil?
+        # Pathname#cleanpath matches more edge conditions than File.expand_path()
+        new_resource.home && Pathname.new(current_resource.home).cleanpath != Pathname.new(new_resource.home).cleanpath
+      end
+    end
+  end
+end