chef 15.11.3-universal-mingw32 → 16.1.16-universal-mingw32
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/Gemfile +3 -7
- data/README.md +1 -1
- data/Rakefile +44 -16
- data/chef.gemspec +6 -4
- data/distro/powershell/chef/chef.psm1 +3 -3
- data/distro/templates/powershell/chef/chef.psm1.erb +3 -3
- data/lib/chef/action_collection.rb +16 -5
- data/lib/chef/application.rb +33 -54
- data/lib/chef/application/apply.rb +18 -1
- data/lib/chef/application/base.rb +8 -3
- data/lib/chef/application/knife.rb +1 -1
- data/lib/chef/chef_class.rb +4 -4
- data/lib/chef/chef_fs/file_system/chef_server/acls_dir.rb +1 -1
- data/lib/chef/chef_fs/file_system/chef_server/cookbook_file.rb +1 -1
- data/lib/chef/chef_fs/file_system/chef_server/rest_list_entry.rb +6 -2
- data/lib/chef/chef_fs/file_system/repository/chef_repository_file_system_root_dir.rb +3 -3
- data/lib/chef/chef_fs/file_system/repository/directory.rb +1 -1
- data/lib/chef/chef_fs/parallelizer/parallel_enumerable.rb +1 -1
- data/lib/chef/chef_fs/path_utils.rb +3 -3
- data/lib/chef/client.rb +16 -14
- data/lib/chef/config.rb +1 -1
- data/lib/chef/cookbook/file_system_file_vendor.rb +1 -1
- data/lib/chef/cookbook/gem_installer.rb +1 -1
- data/lib/chef/cookbook/metadata.rb +45 -22
- data/lib/chef/cookbook_loader.rb +1 -1
- data/lib/chef/cookbook_manifest.rb +1 -1
- data/lib/chef/cookbook_site_streaming_uploader.rb +1 -1
- data/lib/chef/cookbook_version.rb +38 -3
- data/lib/chef/data_collector.rb +1 -1
- data/lib/chef/data_collector/error_handlers.rb +1 -1
- data/lib/chef/data_collector/run_end_message.rb +7 -1
- data/lib/chef/decorator/lazy_array.rb +2 -2
- data/lib/chef/deprecated.rb +4 -0
- data/lib/chef/digester.rb +4 -4
- data/lib/chef/dist.rb +8 -0
- data/lib/chef/dsl/chef_vault.rb +84 -0
- data/lib/chef/dsl/declare_resource.rb +7 -5
- data/lib/chef/dsl/platform_introspection.rb +3 -2
- data/lib/chef/dsl/recipe.rb +7 -12
- data/lib/chef/dsl/universal.rb +3 -7
- data/lib/chef/encrypted_data_bag_item/decryptor.rb +1 -1
- data/lib/chef/encrypted_data_bag_item/encryptor.rb +1 -1
- data/lib/chef/event_dispatch/base.rb +3 -0
- data/lib/chef/formatters/base.rb +1 -1
- data/lib/chef/formatters/doc.rb +1 -1
- data/lib/chef/formatters/indentable_output_stream.rb +7 -16
- data/lib/chef/http.rb +1 -1
- data/lib/chef/http/decompressor.rb +1 -1
- data/lib/chef/http/http_request.rb +3 -2
- data/lib/chef/json_compat.rb +1 -1
- data/lib/chef/key.rb +1 -1
- data/lib/chef/knife.rb +2 -4
- data/lib/chef/knife/acl_add.rb +57 -0
- data/lib/chef/knife/acl_base.rb +183 -0
- data/lib/chef/knife/acl_bulk_add.rb +78 -0
- data/lib/chef/knife/acl_bulk_remove.rb +83 -0
- data/lib/chef/knife/acl_remove.rb +62 -0
- data/lib/chef/knife/acl_show.rb +56 -0
- data/lib/chef/knife/bootstrap.rb +84 -90
- data/lib/chef/knife/bootstrap/chef_vault_handler.rb +2 -2
- data/lib/chef/knife/bootstrap/client_builder.rb +2 -2
- data/lib/chef/knife/bootstrap/templates/chef-full.erb +11 -11
- data/lib/chef/knife/bootstrap/templates/windows-chef-client-msi.erb +12 -12
- data/lib/chef/knife/core/bootstrap_context.rb +63 -60
- data/lib/chef/knife/core/generic_presenter.rb +4 -3
- data/lib/chef/knife/core/hashed_command_loader.rb +1 -1
- data/lib/chef/knife/core/node_presenter.rb +2 -2
- data/lib/chef/knife/core/status_presenter.rb +5 -5
- data/lib/chef/knife/core/subcommand_loader.rb +1 -1
- data/lib/chef/knife/core/ui.rb +17 -1
- data/lib/chef/knife/core/windows_bootstrap_context.rb +44 -42
- data/lib/chef/knife/data_bag_secret_options.rb +18 -45
- data/lib/chef/knife/group_add.rb +55 -0
- data/lib/chef/knife/{cookbook_site_download.rb → group_create.rb} +21 -12
- data/lib/chef/knife/group_destroy.rb +53 -0
- data/lib/chef/knife/{cookbook_site_list.rb → group_list.rb} +14 -11
- data/lib/chef/knife/group_remove.rb +56 -0
- data/lib/chef/knife/{cookbook_site_install.rb → group_show.rb} +21 -12
- data/lib/chef/knife/key_create_base.rb +1 -1
- data/lib/chef/knife/key_edit_base.rb +1 -1
- data/lib/chef/knife/ssh.rb +12 -31
- data/lib/chef/knife/status.rb +3 -3
- data/lib/chef/knife/supermarket_download.rb +1 -2
- data/lib/chef/knife/supermarket_install.rb +2 -3
- data/lib/chef/knife/supermarket_list.rb +1 -2
- data/lib/chef/knife/supermarket_search.rb +1 -2
- data/lib/chef/knife/supermarket_share.rb +1 -2
- data/lib/chef/knife/supermarket_show.rb +1 -2
- data/lib/chef/knife/supermarket_unshare.rb +1 -2
- data/lib/chef/knife/{cookbook_site_show.rb → user_dissociate.rb} +15 -13
- data/lib/chef/knife/{cookbook_site_search.rb → user_invite_add.rb} +16 -13
- data/lib/chef/knife/user_invite_list.rb +34 -0
- data/lib/chef/knife/user_invite_rescind.rb +63 -0
- data/lib/chef/knife/yaml_convert.rb +91 -0
- data/lib/chef/mixin/api_version_request_handling.rb +1 -1
- data/lib/chef/mixin/checksum.rb +0 -1
- data/lib/chef/mixin/openssl_helper.rb +4 -4
- data/lib/chef/mixin/powershell_exec.rb +10 -1
- data/lib/chef/mixin/powershell_out.rb +1 -1
- data/lib/chef/mixin/properties.rb +16 -2
- data/lib/chef/mixin/shell_out.rb +1 -5
- data/lib/chef/monkey_patches/net_http.rb +0 -4
- data/lib/chef/node.rb +18 -6
- data/lib/chef/node/attribute.rb +2 -2
- data/lib/chef/node/immutable_collections.rb +1 -1
- data/lib/chef/node/mixin/immutablize_array.rb +4 -0
- data/lib/chef/node/mixin/immutablize_hash.rb +3 -0
- data/lib/chef/node_map.rb +5 -31
- data/lib/chef/platform/priority_map.rb +4 -4
- data/lib/chef/platform/query_helpers.rb +6 -34
- data/lib/chef/policy_builder/policyfile.rb +1 -1
- data/lib/chef/powershell.rb +14 -0
- data/lib/chef/property.rb +24 -6
- data/lib/chef/provider.rb +40 -6
- data/lib/chef/provider/cron.rb +2 -2
- data/lib/chef/provider/directory.rb +3 -3
- data/lib/chef/provider/dsc_resource.rb +1 -1
- data/lib/chef/provider/dsc_script.rb +1 -1
- data/lib/chef/provider/execute.rb +3 -9
- data/lib/chef/provider/file.rb +6 -6
- data/lib/chef/provider/git.rb +84 -27
- data/lib/chef/provider/group.rb +4 -4
- data/lib/chef/provider/http_request.rb +6 -6
- data/lib/chef/provider/ifconfig.rb +4 -4
- data/lib/chef/provider/launchd.rb +45 -64
- data/lib/chef/provider/link.rb +2 -2
- data/lib/chef/provider/mount.rb +5 -5
- data/lib/chef/provider/osx_profile.rb +7 -3
- data/lib/chef/provider/package.rb +2 -2
- data/lib/chef/provider/package/cab.rb +5 -6
- data/lib/chef/provider/package/chocolatey.rb +1 -3
- data/lib/chef/provider/package/dnf.rb +66 -10
- data/lib/chef/provider/package/dnf/dnf_helper.py +85 -26
- data/lib/chef/provider/package/dnf/python_helper.rb +79 -36
- data/lib/chef/provider/package/dnf/version.rb +5 -1
- data/lib/chef/provider/package/dpkg.rb +1 -1
- data/lib/chef/provider/package/freebsd/base.rb +2 -1
- data/lib/chef/provider/package/homebrew.rb +107 -43
- data/lib/chef/provider/package/macports.rb +0 -2
- data/lib/chef/provider/package/msu.rb +4 -1
- data/lib/chef/provider/package/pacman.rb +25 -34
- data/lib/chef/provider/package/portage.rb +1 -0
- data/lib/chef/provider/package/powershell.rb +1 -1
- data/lib/chef/provider/package/rubygems.rb +30 -3
- data/lib/chef/provider/package/windows.rb +29 -53
- data/lib/chef/provider/package/windows/msi.rb +2 -2
- data/lib/chef/provider/package/yum.rb +1 -9
- data/lib/chef/provider/package/yum/yum_cache.rb +1 -1
- data/lib/chef/provider/package/zypper.rb +0 -1
- data/lib/chef/provider/powershell_script.rb +5 -11
- data/lib/chef/provider/registry_key.rb +4 -4
- data/lib/chef/provider/remote_directory.rb +5 -5
- data/lib/chef/provider/remote_file/ftp.rb +3 -2
- data/lib/chef/provider/remote_file/local_file.rb +2 -1
- data/lib/chef/provider/remote_file/sftp.rb +3 -2
- data/lib/chef/provider/route.rb +5 -3
- data/lib/chef/provider/ruby_block.rb +1 -1
- data/lib/chef/provider/script.rb +2 -2
- data/lib/chef/provider/service.rb +8 -8
- data/lib/chef/provider/service/aixinit.rb +1 -1
- data/lib/chef/provider/service/arch.rb +1 -1
- data/lib/chef/provider/service/debian.rb +30 -28
- data/lib/chef/provider/service/macosx.rb +16 -10
- data/lib/chef/provider/service/systemd.rb +12 -12
- data/lib/chef/provider/service/upstart.rb +1 -1
- data/lib/chef/provider/service/windows.rb +5 -11
- data/lib/chef/provider/subversion.rb +25 -5
- data/lib/chef/provider/systemd_unit.rb +26 -25
- data/lib/chef/provider/user.rb +6 -6
- data/lib/chef/provider/user/aix.rb +1 -1
- data/lib/chef/provider/user/dscl.rb +6 -6
- data/lib/chef/provider/user/mac.rb +20 -15
- data/lib/chef/provider/whyrun_safe_ruby_block.rb +1 -1
- data/lib/chef/provider/windows_env.rb +3 -3
- data/lib/chef/provider/windows_script.rb +2 -2
- data/lib/chef/provider/windows_task.rb +10 -10
- data/lib/chef/providers.rb +0 -6
- data/lib/chef/recipe.rb +36 -0
- data/lib/chef/resource.rb +44 -57
- data/lib/chef/resource/action_class.rb +24 -22
- data/lib/chef/resource/alternatives.rb +210 -0
- data/lib/chef/resource/apt_package.rb +33 -3
- data/lib/chef/resource/apt_preference.rb +103 -7
- data/lib/chef/resource/apt_repository.rb +357 -18
- data/lib/chef/resource/apt_update.rb +58 -5
- data/lib/chef/resource/archive_file.rb +6 -5
- data/lib/chef/resource/bash.rb +3 -1
- data/lib/chef/resource/batch.rb +1 -1
- data/lib/chef/resource/bff_package.rb +10 -2
- data/lib/chef/resource/breakpoint.rb +1 -2
- data/lib/chef/resource/build_essential.rb +49 -51
- data/lib/chef/resource/cab_package.rb +9 -2
- data/lib/chef/resource/chef_client_cron.rb +228 -0
- data/lib/chef/resource/chef_client_scheduled_task.rb +201 -0
- data/lib/chef/resource/chef_client_systemd_timer.rb +180 -0
- data/lib/chef/resource/chef_gem.rb +15 -18
- data/lib/chef/resource/chef_handler.rb +5 -4
- data/lib/chef/resource/chef_sleep.rb +7 -5
- data/lib/chef/resource/chef_vault_secret.rb +135 -0
- data/lib/chef/resource/chocolatey_config.rb +8 -4
- data/lib/chef/resource/chocolatey_feature.rb +7 -4
- data/lib/chef/resource/chocolatey_package.rb +7 -4
- data/lib/chef/resource/chocolatey_source.rb +7 -4
- data/lib/chef/resource/cookbook_file.rb +4 -3
- data/lib/chef/resource/cron.rb +34 -80
- data/lib/chef/resource/cron_access.rb +10 -6
- data/lib/chef/resource/cron_d.rb +44 -95
- data/lib/chef/resource/csh.rb +3 -1
- data/lib/chef/resource/directory.rb +3 -3
- data/lib/chef/resource/dmg_package.rb +22 -19
- data/lib/chef/resource/dnf_package.rb +3 -4
- data/lib/chef/resource/dpkg_package.rb +3 -2
- data/lib/chef/resource/dsc_resource.rb +6 -4
- data/lib/chef/resource/dsc_script.rb +3 -2
- data/lib/chef/resource/execute.rb +15 -14
- data/lib/chef/resource/file.rb +14 -9
- data/lib/chef/resource/freebsd_package.rb +3 -2
- data/lib/chef/resource/gem_package.rb +19 -11
- data/lib/chef/resource/group.rb +5 -2
- data/lib/chef/resource/helpers/cron_validations.rb +98 -0
- data/lib/chef/resource/homebrew_cask.rb +3 -2
- data/lib/chef/resource/homebrew_package.rb +5 -3
- data/lib/chef/resource/homebrew_tap.rb +3 -2
- data/lib/chef/resource/hostname.rb +26 -20
- data/lib/chef/resource/http_request.rb +1 -2
- data/lib/chef/resource/ifconfig.rb +8 -8
- data/lib/chef/resource/ips_package.rb +11 -3
- data/lib/chef/resource/kernel_module.rb +30 -30
- data/lib/chef/resource/ksh.rb +3 -1
- data/lib/chef/resource/launchd.rb +3 -3
- data/lib/chef/resource/link.rb +5 -27
- data/lib/chef/resource/locale.rb +60 -26
- data/lib/chef/resource/log.rb +13 -2
- data/lib/chef/resource/lwrp_base.rb +1 -1
- data/lib/chef/resource/macos_userdefaults.rb +18 -10
- data/lib/chef/resource/macosx_service.rb +3 -2
- data/lib/chef/resource/macports_package.rb +10 -2
- data/lib/chef/resource/mdadm.rb +63 -3
- data/lib/chef/resource/mount.rb +4 -1
- data/lib/chef/resource/msu_package.rb +19 -2
- data/lib/chef/resource/notify_group.rb +8 -3
- data/lib/chef/resource/ohai.rb +20 -4
- data/lib/chef/resource/ohai_hint.rb +4 -13
- data/lib/chef/resource/openbsd_package.rb +10 -2
- data/lib/chef/resource/openssl_dhparam.rb +11 -2
- data/lib/chef/resource/openssl_ec_private_key.rb +24 -2
- data/lib/chef/resource/openssl_ec_public_key.rb +22 -2
- data/lib/chef/resource/openssl_rsa_private_key.rb +21 -2
- data/lib/chef/resource/openssl_rsa_public_key.rb +23 -2
- data/lib/chef/resource/openssl_x509_certificate.rb +38 -2
- data/lib/chef/resource/openssl_x509_crl.rb +13 -2
- data/lib/chef/resource/openssl_x509_request.rb +38 -2
- data/lib/chef/resource/osx_profile.rb +4 -3
- data/lib/chef/resource/package.rb +3 -2
- data/lib/chef/resource/pacman_package.rb +3 -2
- data/lib/chef/resource/paludis_package.rb +13 -4
- data/lib/chef/resource/perl.rb +3 -1
- data/lib/chef/resource/plist.rb +207 -0
- data/lib/chef/resource/portage_package.rb +14 -4
- data/lib/chef/resource/powershell_package.rb +2 -4
- data/lib/chef/resource/powershell_package_source.rb +4 -2
- data/lib/chef/resource/powershell_script.rb +8 -18
- data/lib/chef/resource/python.rb +3 -1
- data/lib/chef/resource/reboot.rb +1 -2
- data/lib/chef/resource/registry_key.rb +2 -3
- data/lib/chef/resource/remote_directory.rb +3 -1
- data/lib/chef/resource/remote_file.rb +3 -2
- data/lib/chef/resource/rhsm_errata.rb +1 -4
- data/lib/chef/resource/rhsm_errata_level.rb +1 -2
- data/lib/chef/resource/rhsm_register.rb +3 -3
- data/lib/chef/resource/rhsm_repo.rb +4 -3
- data/lib/chef/resource/rhsm_subscription.rb +5 -4
- data/lib/chef/resource/route.rb +6 -2
- data/lib/chef/resource/rpm_package.rb +13 -3
- data/lib/chef/resource/ruby.rb +3 -1
- data/lib/chef/resource/ruby_block.rb +2 -5
- data/lib/chef/resource/scm/_scm.rb +49 -0
- data/lib/chef/resource/{scm.rb → scm/git.rb} +16 -30
- data/lib/chef/resource/{subversion.rb → scm/subversion.rb} +10 -7
- data/lib/chef/resource/script.rb +7 -4
- data/lib/chef/resource/service.rb +7 -8
- data/lib/chef/resource/smartos_package.rb +10 -2
- data/lib/chef/resource/snap_package.rb +4 -2
- data/lib/chef/resource/solaris_package.rb +10 -2
- data/lib/chef/resource/ssh_known_hosts_entry.rb +6 -3
- data/lib/chef/resource/sudo.rb +11 -11
- data/lib/chef/resource/support/cron.d.erb +1 -1
- data/lib/chef/resource/support/cron_access.erb +1 -1
- data/lib/chef/resource/support/sudoer.erb +1 -2
- data/lib/chef/resource/support/ulimit.erb +41 -0
- data/lib/chef/resource/swap_file.rb +7 -5
- data/lib/chef/resource/sysctl.rb +63 -4
- data/lib/chef/resource/systemd_unit.rb +6 -4
- data/lib/chef/resource/template.rb +0 -1
- data/lib/chef/resource/timezone.rb +8 -19
- data/lib/chef/resource/user.rb +3 -5
- data/lib/chef/resource/user/aix_user.rb +0 -2
- data/lib/chef/resource/user/dscl_user.rb +1 -1
- data/lib/chef/resource/user/linux_user.rb +0 -2
- data/lib/chef/resource/user/mac_user.rb +1 -1
- data/lib/chef/resource/user/pw_user.rb +0 -2
- data/lib/chef/resource/user/solaris_user.rb +0 -2
- data/lib/chef/resource/user/windows_user.rb +0 -2
- data/lib/chef/resource/user_ulimit.rb +116 -0
- data/lib/chef/resource/whyrun_safe_ruby_block.rb +1 -0
- data/lib/chef/resource/windows_ad_join.rb +20 -7
- data/lib/chef/resource/windows_auto_run.rb +2 -3
- data/lib/chef/resource/windows_certificate.rb +3 -3
- data/lib/chef/resource/windows_dfs_folder.rb +1 -2
- data/lib/chef/resource/windows_dfs_namespace.rb +1 -2
- data/lib/chef/resource/windows_dfs_server.rb +2 -3
- data/lib/chef/resource/windows_dns_record.rb +0 -1
- data/lib/chef/resource/windows_dns_zone.rb +0 -1
- data/lib/chef/resource/windows_env.rb +12 -4
- data/lib/chef/resource/windows_feature.rb +59 -4
- data/lib/chef/resource/windows_feature_dism.rb +24 -24
- data/lib/chef/resource/windows_feature_powershell.rb +44 -78
- data/lib/chef/resource/windows_firewall_rule.rb +121 -8
- data/lib/chef/resource/windows_font.rb +10 -2
- data/lib/chef/resource/windows_package.rb +76 -7
- data/lib/chef/resource/windows_pagefile.rb +31 -4
- data/lib/chef/resource/windows_path.rb +18 -2
- data/lib/chef/resource/windows_printer.rb +26 -7
- data/lib/chef/resource/windows_printer_port.rb +29 -2
- data/lib/chef/resource/windows_script.rb +3 -4
- data/lib/chef/resource/windows_security_policy.rb +119 -0
- data/lib/chef/resource/windows_service.rb +46 -32
- data/lib/chef/resource/windows_share.rb +22 -6
- data/lib/chef/resource/windows_shortcut.rb +13 -3
- data/lib/chef/resource/windows_task.rb +129 -16
- data/lib/chef/resource/windows_uac.rb +20 -2
- data/lib/chef/resource/windows_user_privilege.rb +199 -0
- data/lib/chef/resource/windows_workgroup.rb +19 -4
- data/lib/chef/resource/yum_package.rb +91 -7
- data/lib/chef/resource/yum_repository.rb +30 -12
- data/lib/chef/resource/zypper_package.rb +32 -5
- data/lib/chef/resource/zypper_repository.rb +19 -6
- data/lib/chef/resource_builder.rb +8 -0
- data/lib/chef/resource_inspector.rb +3 -2
- data/lib/chef/resource_resolver.rb +7 -14
- data/lib/chef/resources.rb +11 -3
- data/lib/chef/run_context/cookbook_compiler.rb +29 -5
- data/lib/chef/scan_access_control.rb +1 -1
- data/lib/chef/shell.rb +22 -0
- data/lib/chef/shell/ext.rb +1 -1
- data/lib/chef/version.rb +1 -1
- data/lib/chef/win32/api.rb +2 -2
- data/lib/chef/win32/api/error.rb +3 -1
- data/lib/chef/win32/api/file.rb +1 -1
- data/lib/chef/win32/api/net.rb +1 -0
- data/lib/chef/win32/api/security.rb +6 -0
- data/lib/chef/win32/file.rb +1 -9
- data/lib/chef/win32/mutex.rb +1 -1
- data/lib/chef/win32/net.rb +1 -0
- data/lib/chef/win32/security.rb +40 -2
- data/lib/chef/win32/security/sid.rb +4 -4
- data/spec/functional/assets/inittest +8 -7
- data/spec/functional/knife/ssh_spec.rb +23 -19
- data/spec/functional/resource/cron_spec.rb +10 -29
- data/spec/functional/resource/dnf_package_spec.rb +441 -156
- data/spec/functional/resource/git_spec.rb +184 -134
- data/spec/functional/resource/insserv_spec.rb +1 -1
- data/spec/functional/resource/launchd_spec.rb +232 -0
- data/spec/functional/resource/link_spec.rb +3 -3
- data/spec/functional/resource/locale_spec.rb +13 -2
- data/spec/functional/resource/msu_package_spec.rb +5 -2
- data/spec/functional/resource/powershell_script_spec.rb +7 -68
- data/spec/functional/resource/remote_file_spec.rb +1 -1
- data/spec/functional/resource/windows_security_policy_spec.rb +90 -0
- data/spec/functional/resource/windows_task_spec.rb +4 -4
- data/spec/functional/resource/windows_user_privilege_spec.rb +193 -0
- data/spec/functional/run_lock_spec.rb +1 -1
- data/spec/functional/shell_spec.rb +1 -1
- data/spec/functional/util/powershell/cmdlet_spec.rb +1 -1
- data/spec/functional/version_spec.rb +1 -1
- data/spec/functional/win32/registry_spec.rb +0 -6
- data/spec/functional/win32/security_spec.rb +22 -0
- data/spec/integration/client/client_spec.rb +123 -2
- data/spec/integration/knife/cookbook_show_spec.rb +28 -26
- data/spec/integration/knife/data_bag_show_spec.rb +1 -1
- data/spec/integration/knife/raw_spec.rb +34 -6
- data/spec/integration/knife/redirection_spec.rb +2 -2
- data/spec/integration/knife/show_spec.rb +32 -3
- data/spec/integration/recipes/lwrp_inline_resources_spec.rb +3 -3
- data/spec/integration/recipes/noop_resource_spec.rb +1 -1
- data/spec/integration/recipes/notifies_spec.rb +49 -20
- data/spec/integration/recipes/notifying_block_spec.rb +8 -5
- data/spec/integration/recipes/provider_choice.rb +2 -0
- data/spec/integration/recipes/recipe_dsl_spec.rb +45 -143
- data/spec/integration/recipes/resource_action_spec.rb +16 -11
- data/spec/integration/recipes/resource_converge_if_changed_spec.rb +1 -1
- data/spec/integration/recipes/resource_load_spec.rb +133 -12
- data/spec/integration/recipes/use_partial_spec.rb +112 -0
- data/spec/integration/solo/solo_spec.rb +3 -3
- data/spec/spec_helper.rb +18 -3
- data/spec/support/chef_helpers.rb +2 -2
- data/spec/support/lib/chef/resource/zen_follower.rb +2 -0
- data/spec/support/platform_helpers.rb +2 -20
- data/spec/support/recipe_dsl_helper.rb +83 -0
- data/spec/support/shared/functional/http.rb +2 -2
- data/spec/support/shared/functional/windows_script.rb +3 -16
- data/spec/support/shared/integration/knife_support.rb +9 -6
- data/spec/support/shared/unit/mock_shellout.rb +1 -1
- data/spec/support/shared/unit/provider/useradd_based_user_provider.rb +4 -4
- data/spec/unit/application/apply_spec.rb +3 -0
- data/spec/unit/application/client_spec.rb +5 -1
- data/spec/unit/application_spec.rb +1 -2
- data/spec/unit/client_spec.rb +7 -5
- data/spec/unit/cookbook/gem_installer_spec.rb +2 -2
- data/spec/unit/cookbook/metadata_spec.rb +38 -19
- data/spec/unit/data_collector_spec.rb +39 -18
- data/spec/unit/file_access_control_spec.rb +1 -1
- data/spec/unit/json_compat_spec.rb +1 -1
- data/spec/unit/knife/bootstrap/chef_vault_handler_spec.rb +15 -15
- data/spec/unit/knife/bootstrap/client_builder_spec.rb +9 -9
- data/spec/unit/knife/bootstrap_spec.rb +20 -38
- data/spec/unit/knife/cookbook_show_spec.rb +1 -0
- data/spec/unit/knife/core/bootstrap_context_spec.rb +23 -43
- data/spec/unit/knife/core/ui_spec.rb +16 -0
- data/spec/unit/knife/core/windows_bootstrap_context_spec.rb +9 -63
- data/spec/unit/knife/data_bag_secret_options_spec.rb +22 -14
- data/spec/unit/knife/ssh_spec.rb +8 -111
- data/spec/unit/knife/status_spec.rb +1 -1
- data/spec/unit/knife_spec.rb +18 -0
- data/spec/unit/mixin/openssl_helper_spec.rb +4 -4
- data/spec/unit/mixin/powershell_exec_spec.rb +10 -0
- data/spec/unit/mixin/shell_out_spec.rb +25 -31
- data/spec/unit/node/attribute_spec.rb +3 -3
- data/spec/unit/node_spec.rb +24 -0
- data/spec/unit/platform/query_helpers_spec.rb +0 -143
- data/spec/unit/property/state_spec.rb +12 -7
- data/spec/unit/property/validation_spec.rb +25 -1
- data/spec/unit/property_spec.rb +12 -9
- data/spec/unit/provider/apt_preference_spec.rb +14 -10
- data/spec/unit/provider/apt_repository_spec.rb +34 -36
- data/spec/unit/provider/apt_update_spec.rb +12 -11
- data/spec/unit/provider/cookbook_file_spec.rb +4 -4
- data/spec/unit/provider/cron_spec.rb +2 -2
- data/spec/unit/provider/directory_spec.rb +4 -15
- data/spec/unit/provider/file_spec.rb +4 -4
- data/spec/unit/provider/git_spec.rb +41 -1
- data/spec/unit/provider/group/groupadd_spec.rb +1 -1
- data/spec/unit/provider/launchd_spec.rb +8 -50
- data/spec/unit/provider/link_spec.rb +0 -1
- data/spec/unit/provider/log_spec.rb +3 -3
- data/spec/unit/provider/mdadm_spec.rb +3 -3
- data/spec/unit/provider/package/dnf/python_helper_spec.rb +1 -1
- data/spec/unit/provider/package/homebrew_spec.rb +280 -174
- data/spec/unit/provider/package/pacman_spec.rb +65 -147
- data/spec/unit/provider/package/portage_spec.rb +2 -2
- data/spec/unit/provider/package/powershell_spec.rb +3 -2
- data/spec/unit/provider/package/rubygems_spec.rb +211 -26
- data/spec/unit/provider/package/windows/exe_spec.rb +1 -1
- data/spec/unit/provider/powershell_script_spec.rb +21 -61
- data/spec/unit/provider/remote_file_spec.rb +3 -4
- data/spec/unit/provider/service/debian_service_spec.rb +34 -13
- data/spec/unit/provider/service/macosx_spec.rb +210 -214
- data/spec/unit/provider/service/systemd_service_spec.rb +23 -23
- data/spec/unit/provider/subversion_spec.rb +4 -2
- data/spec/unit/provider/template_spec.rb +3 -4
- data/spec/unit/provider/zypper_repository_spec.rb +17 -17
- data/spec/unit/provider_resolver_spec.rb +4 -4
- data/spec/unit/recipe_spec.rb +68 -0
- data/spec/unit/resource/alternatives_spec.rb +120 -0
- data/spec/unit/resource/apt_preference_spec.rb +0 -18
- data/spec/unit/resource/apt_repository_spec.rb +0 -18
- data/spec/unit/resource/apt_update_spec.rb +0 -18
- data/spec/unit/resource/chef_client_cron_spec.rb +119 -0
- data/spec/unit/resource/chef_client_scheduled_task_spec.rb +102 -0
- data/spec/unit/resource/chef_client_systemd_timer_spec.rb +70 -0
- data/spec/unit/resource/chef_vault_secret_spec.rb +40 -0
- data/spec/unit/resource/chocolatey_source_spec.rb +2 -1
- data/spec/unit/resource/cron_d_spec.rb +6 -48
- data/spec/unit/resource/cron_spec.rb +4 -10
- data/spec/unit/resource/gem_package_spec.rb +3 -3
- data/spec/unit/resource/helpers/cron_validations_spec.rb +77 -0
- data/spec/unit/resource/link_spec.rb +0 -4
- data/spec/unit/resource/locale_spec.rb +0 -34
- data/spec/unit/resource/msu_package_spec.rb +4 -0
- data/spec/unit/resource/ohai_spec.rb +56 -2
- data/spec/unit/resource/plist_spec.rb +130 -0
- data/spec/unit/resource/powershell_script_spec.rb +0 -5
- data/spec/unit/resource/{git_spec.rb → scm/git_spec.rb} +50 -2
- data/spec/unit/resource/{scm_spec.rb → scm/scm.rb} +1 -52
- data/spec/unit/resource/{subversion_spec.rb → scm/subversion_spec.rb} +2 -3
- data/spec/unit/resource/service_spec.rb +4 -0
- data/spec/unit/resource/user_spec.rb +2 -2
- data/spec/unit/resource/user_ulimit_spec.rb +53 -0
- data/spec/unit/resource/windows_feature_dism_spec.rb +2 -17
- data/spec/unit/resource/windows_feature_powershell_spec.rb +2 -17
- data/spec/unit/resource/windows_firewall_rule_spec.rb +88 -41
- data/spec/unit/resource/windows_package_spec.rb +14 -0
- data/spec/unit/resource/windows_service_spec.rb +9 -0
- data/spec/unit/resource_reporter_spec.rb +2 -6
- data/spec/unit/resource_spec.rb +10 -3
- data/spec/unit/run_lock_spec.rb +1 -1
- data/spec/unit/scan_access_control_spec.rb +1 -1
- data/spec/unit/search/query_spec.rb +1 -1
- data/spec/unit/win32/registry_spec.rb +1 -1
- data/tasks/rspec.rb +6 -14
- metadata +92 -37
- data/lib/chef/dsl/core.rb +0 -52
- data/lib/chef/knife/cookbook_site_share.rb +0 -41
- data/lib/chef/knife/cookbook_site_unshare.rb +0 -41
- data/lib/chef/provider/apt_preference.rb +0 -93
- data/lib/chef/provider/apt_repository.rb +0 -358
- data/lib/chef/provider/apt_update.rb +0 -79
- data/lib/chef/provider/log.rb +0 -43
- data/lib/chef/provider/mdadm.rb +0 -85
- data/lib/chef/provider/ohai.rb +0 -45
- data/lib/chef/resource/git.rb +0 -37
- data/spec/unit/provider/ohai_spec.rb +0 -84
@@ -41,7 +41,7 @@ class Chef
|
|
41
41
|
|
42
42
|
# Upstart does more than start or stop a service, creating multiple 'states' [1] that a service can be in.
|
43
43
|
# In chef, when we ask a service to start, we expect it to have started before performing the next step
|
44
|
-
# since we have top down dependencies. Which is to say we may follow
|
44
|
+
# since we have top down dependencies. Which is to say we may follow with a resource next that requires
|
45
45
|
# that service to be running. According to [2] we can trust that sending a 'goal' such as start will not
|
46
46
|
# return until that 'goal' is reached, or some error has occurred.
|
47
47
|
#
|
@@ -47,8 +47,6 @@ class Chef::Provider::Service::Windows < Chef::Provider::Service
|
|
47
47
|
START_PENDING = "start pending".freeze
|
48
48
|
STOP_PENDING = "stop pending".freeze
|
49
49
|
|
50
|
-
TIMEOUT = 60
|
51
|
-
|
52
50
|
SERVICE_RIGHT = "SeServiceLogonRight".freeze
|
53
51
|
|
54
52
|
def load_current_resource
|
@@ -217,7 +215,7 @@ class Chef::Provider::Service::Windows < Chef::Provider::Service
|
|
217
215
|
converge_delayed_start
|
218
216
|
end
|
219
217
|
|
220
|
-
|
218
|
+
action :enable do
|
221
219
|
if current_startup_type != :automatic
|
222
220
|
converge_by("enable service #{@new_resource}") do
|
223
221
|
enable_service
|
@@ -230,7 +228,7 @@ class Chef::Provider::Service::Windows < Chef::Provider::Service
|
|
230
228
|
@new_resource.enabled(true)
|
231
229
|
end
|
232
230
|
|
233
|
-
|
231
|
+
action :disable do
|
234
232
|
if current_startup_type != :disabled
|
235
233
|
converge_by("disable service #{@new_resource}") do
|
236
234
|
disable_service
|
@@ -243,7 +241,7 @@ class Chef::Provider::Service::Windows < Chef::Provider::Service
|
|
243
241
|
@new_resource.enabled(false)
|
244
242
|
end
|
245
243
|
|
246
|
-
|
244
|
+
action :configure_startup do
|
247
245
|
startup_type = @new_resource.startup_type
|
248
246
|
if current_startup_type != startup_type
|
249
247
|
converge_by("set service #{@new_resource} startup type to #{startup_type}") do
|
@@ -329,22 +327,18 @@ class Chef::Provider::Service::Windows < Chef::Provider::Service
|
|
329
327
|
retries = 0
|
330
328
|
loop do
|
331
329
|
break if current_state == desired_state
|
332
|
-
raise Timeout::Error if ( retries += 1 ) >
|
330
|
+
raise Timeout::Error if ( retries += 1 ) > @new_resource.timeout
|
333
331
|
|
334
332
|
sleep 1
|
335
333
|
end
|
336
334
|
end
|
337
335
|
|
338
|
-
def resource_timeout
|
339
|
-
@resource_timeout ||= @new_resource.timeout || TIMEOUT
|
340
|
-
end
|
341
|
-
|
342
336
|
def spawn_command_thread
|
343
337
|
worker = Thread.new do
|
344
338
|
yield
|
345
339
|
end
|
346
340
|
|
347
|
-
Timeout.timeout(
|
341
|
+
Timeout.timeout(@new_resource.timeout) do
|
348
342
|
worker.join
|
349
343
|
end
|
350
344
|
end
|
@@ -55,7 +55,7 @@ class Chef
|
|
55
55
|
end
|
56
56
|
end
|
57
57
|
|
58
|
-
|
58
|
+
action :checkout do
|
59
59
|
if target_dir_non_existent_or_empty?
|
60
60
|
converge_by("perform checkout of #{new_resource.repository} into #{new_resource.destination}") do
|
61
61
|
shell_out!(checkout_command, run_options)
|
@@ -65,7 +65,7 @@ class Chef
|
|
65
65
|
end
|
66
66
|
end
|
67
67
|
|
68
|
-
|
68
|
+
action :export do
|
69
69
|
if target_dir_non_existent_or_empty?
|
70
70
|
action_force_export
|
71
71
|
else
|
@@ -73,13 +73,13 @@ class Chef
|
|
73
73
|
end
|
74
74
|
end
|
75
75
|
|
76
|
-
|
76
|
+
action :force_export do
|
77
77
|
converge_by("export #{new_resource.repository} into #{new_resource.destination}") do
|
78
78
|
shell_out!(export_command, run_options)
|
79
79
|
end
|
80
80
|
end
|
81
81
|
|
82
|
-
|
82
|
+
action :sync do
|
83
83
|
assert_target_directory_valid!
|
84
84
|
if ::File.exist?(::File.join(new_resource.destination, ".svn"))
|
85
85
|
current_rev = find_current_revision
|
@@ -149,9 +149,15 @@ class Chef
|
|
149
149
|
end
|
150
150
|
|
151
151
|
def run_options(run_opts = {})
|
152
|
-
|
152
|
+
env = {}
|
153
|
+
if new_resource.user
|
154
|
+
run_opts[:user] = new_resource.user
|
155
|
+
env["HOME"] = get_homedir(new_resource.user)
|
156
|
+
end
|
153
157
|
run_opts[:group] = new_resource.group if new_resource.group
|
154
158
|
run_opts[:timeout] = new_resource.timeout if new_resource.timeout
|
159
|
+
env.merge!(new_resource.environment) if new_resource.environment
|
160
|
+
run_opts[:environment] = env unless env.empty?
|
155
161
|
run_opts
|
156
162
|
end
|
157
163
|
|
@@ -225,6 +231,20 @@ class Chef
|
|
225
231
|
raise Chef::Exceptions::MissingParentDirectory, msg
|
226
232
|
end
|
227
233
|
end
|
234
|
+
|
235
|
+
# Returns the home directory of the user
|
236
|
+
# @param [String] user must be a string.
|
237
|
+
# @return [String] the home directory of the user.
|
238
|
+
#
|
239
|
+
def get_homedir(user)
|
240
|
+
require "etc" unless defined?(Etc)
|
241
|
+
case user
|
242
|
+
when Integer
|
243
|
+
Etc.getpwuid(user).dir
|
244
|
+
else
|
245
|
+
Etc.getpwnam(user.to_s).dir
|
246
|
+
end
|
247
|
+
end
|
228
248
|
end
|
229
249
|
end
|
230
250
|
end
|
@@ -57,7 +57,7 @@ class Chef
|
|
57
57
|
end
|
58
58
|
end
|
59
59
|
|
60
|
-
|
60
|
+
action :create do
|
61
61
|
if current_resource.content != new_resource.to_ini
|
62
62
|
converge_by("creating unit: #{new_resource.unit_name}") do
|
63
63
|
manage_unit_file(:create)
|
@@ -66,7 +66,7 @@ class Chef
|
|
66
66
|
end
|
67
67
|
end
|
68
68
|
|
69
|
-
|
69
|
+
action :delete do
|
70
70
|
if ::File.exist?(unit_path)
|
71
71
|
converge_by("deleting unit: #{new_resource.unit_name}") do
|
72
72
|
manage_unit_file(:delete)
|
@@ -75,19 +75,19 @@ class Chef
|
|
75
75
|
end
|
76
76
|
end
|
77
77
|
|
78
|
-
|
78
|
+
action :preset do
|
79
79
|
converge_by("restoring enable/disable preset configuration for unit: #{new_resource.unit_name}") do
|
80
80
|
systemctl_execute!(:preset, new_resource.unit_name)
|
81
81
|
end
|
82
82
|
end
|
83
83
|
|
84
|
-
|
84
|
+
action :revert do
|
85
85
|
converge_by("reverting to vendor version of unit: #{new_resource.unit_name}") do
|
86
86
|
systemctl_execute!(:revert, new_resource.unit_name)
|
87
87
|
end
|
88
88
|
end
|
89
89
|
|
90
|
-
|
90
|
+
action :enable do
|
91
91
|
if current_resource.static
|
92
92
|
logger.trace("#{new_resource.unit_name} is a static unit, enabling is a NOP.")
|
93
93
|
end
|
@@ -103,7 +103,7 @@ class Chef
|
|
103
103
|
end
|
104
104
|
end
|
105
105
|
|
106
|
-
|
106
|
+
action :disable do
|
107
107
|
if current_resource.static
|
108
108
|
logger.trace("#{new_resource.unit_name} is a static unit, disabling is a NOP.")
|
109
109
|
end
|
@@ -120,14 +120,14 @@ class Chef
|
|
120
120
|
end
|
121
121
|
end
|
122
122
|
|
123
|
-
|
123
|
+
action :reenable do
|
124
124
|
converge_by("reenabling unit: #{new_resource.unit_name}") do
|
125
125
|
systemctl_execute!(:reenable, new_resource.unit_name)
|
126
126
|
logger.info("#{new_resource} reenabled")
|
127
127
|
end
|
128
128
|
end
|
129
129
|
|
130
|
-
|
130
|
+
action :mask do
|
131
131
|
unless current_resource.masked
|
132
132
|
converge_by("masking unit: #{new_resource.unit_name}") do
|
133
133
|
systemctl_execute!(:mask, new_resource.unit_name)
|
@@ -136,7 +136,7 @@ class Chef
|
|
136
136
|
end
|
137
137
|
end
|
138
138
|
|
139
|
-
|
139
|
+
action :unmask do
|
140
140
|
if current_resource.masked
|
141
141
|
converge_by("unmasking unit: #{new_resource.unit_name}") do
|
142
142
|
systemctl_execute!(:unmask, new_resource.unit_name)
|
@@ -145,7 +145,7 @@ class Chef
|
|
145
145
|
end
|
146
146
|
end
|
147
147
|
|
148
|
-
|
148
|
+
action :start do
|
149
149
|
unless current_resource.active
|
150
150
|
converge_by("starting unit: #{new_resource.unit_name}") do
|
151
151
|
systemctl_execute!(:start, new_resource.unit_name, default_env: false)
|
@@ -154,7 +154,7 @@ class Chef
|
|
154
154
|
end
|
155
155
|
end
|
156
156
|
|
157
|
-
|
157
|
+
action :stop do
|
158
158
|
if current_resource.active
|
159
159
|
converge_by("stopping unit: #{new_resource.unit_name}") do
|
160
160
|
systemctl_execute!(:stop, new_resource.unit_name, default_env: false)
|
@@ -163,14 +163,14 @@ class Chef
|
|
163
163
|
end
|
164
164
|
end
|
165
165
|
|
166
|
-
|
166
|
+
action :restart do
|
167
167
|
converge_by("restarting unit: #{new_resource.unit_name}") do
|
168
168
|
systemctl_execute!(:restart, new_resource.unit_name, default_env: false)
|
169
169
|
logger.info("#{new_resource} restarted")
|
170
170
|
end
|
171
171
|
end
|
172
172
|
|
173
|
-
|
173
|
+
action :reload do
|
174
174
|
if current_resource.active
|
175
175
|
converge_by("reloading unit: #{new_resource.unit_name}") do
|
176
176
|
systemctl_execute!(:reload, new_resource.unit_name, default_env: false)
|
@@ -181,21 +181,21 @@ class Chef
|
|
181
181
|
end
|
182
182
|
end
|
183
183
|
|
184
|
-
|
184
|
+
action :try_restart do
|
185
185
|
converge_by("try-restarting unit: #{new_resource.unit_name}") do
|
186
186
|
systemctl_execute!("try-restart", new_resource.unit_name, default_env: false)
|
187
187
|
logger.info("#{new_resource} try-restarted")
|
188
188
|
end
|
189
189
|
end
|
190
190
|
|
191
|
-
|
191
|
+
action :reload_or_restart do
|
192
192
|
converge_by("reload-or-restarting unit: #{new_resource.unit_name}") do
|
193
193
|
systemctl_execute!("reload-or-restart", new_resource.unit_name, default_env: false)
|
194
194
|
logger.info("#{new_resource} reload-or-restarted")
|
195
195
|
end
|
196
196
|
end
|
197
197
|
|
198
|
-
|
198
|
+
action :reload_or_try_restart do
|
199
199
|
converge_by("reload-or-try-restarting unit: #{new_resource.unit_name}") do
|
200
200
|
systemctl_execute!("reload-or-try-restart", new_resource.unit_name, default_env: false)
|
201
201
|
logger.info("#{new_resource} reload-or-try-restarted")
|
@@ -232,15 +232,16 @@ class Chef
|
|
232
232
|
end
|
233
233
|
end
|
234
234
|
|
235
|
-
def manage_unit_file(
|
236
|
-
|
237
|
-
|
238
|
-
|
239
|
-
|
240
|
-
|
241
|
-
|
242
|
-
|
243
|
-
|
235
|
+
def manage_unit_file(the_action = :nothing)
|
236
|
+
file unit_path do
|
237
|
+
owner "root"
|
238
|
+
group "root"
|
239
|
+
mode "0644"
|
240
|
+
sensitive new_resource.sensitive
|
241
|
+
content new_resource.to_ini
|
242
|
+
verify :systemd_unit if new_resource.verify
|
243
|
+
action the_action
|
244
|
+
end
|
244
245
|
end
|
245
246
|
|
246
247
|
def daemon_reload
|
data/lib/chef/provider/user.rb
CHANGED
@@ -116,7 +116,7 @@ class Chef
|
|
116
116
|
false
|
117
117
|
end
|
118
118
|
|
119
|
-
|
119
|
+
action :create do
|
120
120
|
if !@user_exists
|
121
121
|
converge_by("create user #{new_resource.username}") do
|
122
122
|
create_user
|
@@ -130,7 +130,7 @@ class Chef
|
|
130
130
|
end
|
131
131
|
end
|
132
132
|
|
133
|
-
|
133
|
+
action :remove do
|
134
134
|
return unless @user_exists
|
135
135
|
|
136
136
|
converge_by("remove user #{new_resource.username}") do
|
@@ -139,7 +139,7 @@ class Chef
|
|
139
139
|
end
|
140
140
|
end
|
141
141
|
|
142
|
-
|
142
|
+
action :manage do
|
143
143
|
return unless @user_exists && compare_user
|
144
144
|
|
145
145
|
converge_by("manage user #{new_resource.username}") do
|
@@ -148,7 +148,7 @@ class Chef
|
|
148
148
|
end
|
149
149
|
end
|
150
150
|
|
151
|
-
|
151
|
+
action :modify do
|
152
152
|
return unless compare_user
|
153
153
|
|
154
154
|
converge_by("modify user #{new_resource.username}") do
|
@@ -157,7 +157,7 @@ class Chef
|
|
157
157
|
end
|
158
158
|
end
|
159
159
|
|
160
|
-
|
160
|
+
action :lock do
|
161
161
|
if check_lock == false
|
162
162
|
converge_by("lock the user #{new_resource.username}") do
|
163
163
|
lock_user
|
@@ -168,7 +168,7 @@ class Chef
|
|
168
168
|
end
|
169
169
|
end
|
170
170
|
|
171
|
-
|
171
|
+
action :unlock do
|
172
172
|
if check_lock == true
|
173
173
|
converge_by("unlock user #{new_resource.username}") do
|
174
174
|
unlock_user
|
@@ -40,7 +40,7 @@ class Chef
|
|
40
40
|
shell_out!("userdel", userdel_options, new_resource.username)
|
41
41
|
end
|
42
42
|
|
43
|
-
# Aix does not support -r like other unix,
|
43
|
+
# Aix does not support -r like other unix, system account is created by adding to 'system' group
|
44
44
|
def useradd_options
|
45
45
|
opts = []
|
46
46
|
opts << "-g" << "system" if new_resource.system
|
@@ -28,7 +28,7 @@ class Chef
|
|
28
28
|
class User
|
29
29
|
#
|
30
30
|
# The most tricky bit of this provider is the way it deals with user passwords.
|
31
|
-
#
|
31
|
+
# macOS has different password shadow calculations based on the version.
|
32
32
|
# < 10.7 => password shadow calculation format SALTED-SHA1
|
33
33
|
# => stored in: /var/db/shadow/hash/#{guid}
|
34
34
|
# => shadow binary length 68 bytes
|
@@ -118,7 +118,7 @@ in 'password', with the associated 'salt' and 'iterations'.")
|
|
118
118
|
|
119
119
|
# Calling shell_out directly since we want to give an input stream
|
120
120
|
shadow_hash_xml = convert_binary_plist_to_xml(shadow_hash_binary.string)
|
121
|
-
shadow_hash = Plist.parse_xml(shadow_hash_xml)
|
121
|
+
shadow_hash = ::Plist.parse_xml(shadow_hash_xml)
|
122
122
|
|
123
123
|
if shadow_hash["SALTED-SHA512-PBKDF2"] # 10.7+ contains this, but we retain the check in case it goes away in the future
|
124
124
|
@password_shadow_conversion_algorithm = "SALTED-SHA512-PBKDF2"
|
@@ -382,7 +382,7 @@ in 'password', with the associated 'salt' and 'iterations'.")
|
|
382
382
|
salt,
|
383
383
|
iterations,
|
384
384
|
128,
|
385
|
-
OpenSSL::Digest
|
385
|
+
OpenSSL::Digest.new("SHA512")
|
386
386
|
)
|
387
387
|
end
|
388
388
|
|
@@ -541,7 +541,7 @@ in 'password', with the associated 'salt' and 'iterations'.")
|
|
541
541
|
begin
|
542
542
|
user_plist_file = "#{USER_PLIST_DIRECTORY}/#{new_resource.username}.plist"
|
543
543
|
user_plist_info = run_plutil("convert", "xml1", "-o", "-", user_plist_file)
|
544
|
-
user_info = Plist.parse_xml(user_plist_info)
|
544
|
+
user_info = ::Plist.parse_xml(user_plist_info)
|
545
545
|
rescue Chef::Exceptions::PlistUtilCommandFailed
|
546
546
|
end
|
547
547
|
|
@@ -554,7 +554,7 @@ in 'password', with the associated 'salt' and 'iterations'.")
|
|
554
554
|
#
|
555
555
|
def save_user_info(user_info)
|
556
556
|
user_plist_file = "#{USER_PLIST_DIRECTORY}/#{new_resource.username}.plist"
|
557
|
-
Plist::Emit.save_plist(user_info, user_plist_file)
|
557
|
+
::Plist::Emit.save_plist(user_info, user_plist_file)
|
558
558
|
run_plutil("convert", "binary1", user_plist_file)
|
559
559
|
end
|
560
560
|
|
@@ -627,7 +627,7 @@ in 'password', with the associated 'salt' and 'iterations'.")
|
|
627
627
|
salt,
|
628
628
|
current_resource.iterations,
|
629
629
|
128,
|
630
|
-
OpenSSL::Digest
|
630
|
+
OpenSSL::Digest.new("SHA512")
|
631
631
|
).unpack("H*").first == current_resource.password
|
632
632
|
end
|
633
633
|
|
@@ -22,6 +22,7 @@ require_relative "../../mixin/shell_out"
|
|
22
22
|
require_relative "../../mixin/which"
|
23
23
|
require_relative "../user"
|
24
24
|
require_relative "../../resource/user/mac_user"
|
25
|
+
require "plist"
|
25
26
|
|
26
27
|
class Chef
|
27
28
|
class Provider
|
@@ -101,7 +102,7 @@ class Chef
|
|
101
102
|
shadow_hash_hex = user_plist[:shadow_hash][0]
|
102
103
|
return unless shadow_hash_hex && shadow_hash_hex != ""
|
103
104
|
|
104
|
-
# The password
|
105
|
+
# The password information is stored in the ShadowHashData key in the
|
105
106
|
# plist. However, parsing it is a bit tricky as the value is itself
|
106
107
|
# another encoded binary plist. We have to extract the encoded plist,
|
107
108
|
# decode it from hex to a binary plist and then convert the binary
|
@@ -115,6 +116,8 @@ class Chef
|
|
115
116
|
#
|
116
117
|
# eg:
|
117
118
|
#
|
119
|
+
# spellchecker: disable
|
120
|
+
#
|
118
121
|
# <array>
|
119
122
|
# <string>77687920 63616e27 74206170 706c6520 6275696c 6420636f 6e736973 74656e74 20746f6f 6c696e67</string>
|
120
123
|
# </array>
|
@@ -125,6 +128,8 @@ class Chef
|
|
125
128
|
# <data>AADKAAAKAA4LAA0MAAAAAAAAAAA=</data>
|
126
129
|
# </array>
|
127
130
|
#
|
131
|
+
# spellchecker: disable
|
132
|
+
#
|
128
133
|
begin
|
129
134
|
shadow_binary_plist = [shadow_hash_hex.delete(" ")].pack("H*")
|
130
135
|
shadow_xml_plist = shell_out("plutil", "-convert", "xml1", "-o", "-", "-", input: shadow_binary_plist).stdout
|
@@ -178,7 +183,7 @@ class Chef
|
|
178
183
|
end
|
179
184
|
|
180
185
|
if new_resource.manage_home
|
181
|
-
# "
|
186
|
+
# "sysadminctl -addUser" will create the home directory if it's
|
182
187
|
# the default /Users/<username>, otherwise it sets it in plist
|
183
188
|
# but does not create it. Here we'll ensure that it gets created
|
184
189
|
# if we've been given a directory that is not the default.
|
@@ -196,12 +201,12 @@ class Chef
|
|
196
201
|
# group management should be done outside of the core resource.
|
197
202
|
group_name, group_id, group_action = user_group_info
|
198
203
|
|
199
|
-
|
204
|
+
group group_name do
|
200
205
|
members new_resource.username
|
201
206
|
gid group_id if group_id
|
202
|
-
action
|
207
|
+
action group_action
|
203
208
|
append true
|
204
|
-
end
|
209
|
+
end
|
205
210
|
|
206
211
|
converge_by("create primary group ID") do
|
207
212
|
run_dscl("create", "/Users/#{new_resource.username}", "PrimaryGroupID", group_id)
|
@@ -246,16 +251,16 @@ class Chef
|
|
246
251
|
|
247
252
|
if diverged?(:admin)
|
248
253
|
converge_by("alter admin group membership") do
|
249
|
-
|
254
|
+
group "admin" do
|
250
255
|
if new_resource.admin
|
251
256
|
members new_resource.username
|
252
257
|
else
|
253
258
|
excluded_members new_resource.username
|
254
259
|
end
|
255
260
|
|
256
|
-
action :
|
261
|
+
action :create
|
257
262
|
append true
|
258
|
-
end
|
263
|
+
end
|
259
264
|
|
260
265
|
admins = admin_group_plist[:group_members]
|
261
266
|
if new_resource.admin
|
@@ -271,12 +276,12 @@ class Chef
|
|
271
276
|
end
|
272
277
|
|
273
278
|
group_name, group_id, group_action = user_group_info
|
274
|
-
|
279
|
+
group group_name do
|
275
280
|
gid group_id if group_id
|
276
281
|
members new_resource.username
|
277
|
-
action
|
282
|
+
action group_action
|
278
283
|
append true
|
279
|
-
end
|
284
|
+
end
|
280
285
|
|
281
286
|
if diverged?(:gid)
|
282
287
|
converge_by("alter group membership") do
|
@@ -490,7 +495,7 @@ class Chef
|
|
490
495
|
convert_to_binary(current_resource.salt),
|
491
496
|
current_resource.iterations.to_i,
|
492
497
|
128,
|
493
|
-
OpenSSL::Digest
|
498
|
+
OpenSSL::Digest.new("SHA512")
|
494
499
|
).unpack("H*")[0] != current_resource.password
|
495
500
|
end
|
496
501
|
|
@@ -516,7 +521,7 @@ class Chef
|
|
516
521
|
salt.string,
|
517
522
|
new_resource.iterations,
|
518
523
|
128,
|
519
|
-
OpenSSL::Digest
|
524
|
+
OpenSSL::Digest.new("SHA512")
|
520
525
|
)
|
521
526
|
)
|
522
527
|
end
|
@@ -553,7 +558,7 @@ class Chef
|
|
553
558
|
# 0x0A End of record denoted by \n
|
554
559
|
# 0x5C Escaping is denoted by \
|
555
560
|
# 0x3A Fields are separated by :
|
556
|
-
# 0x2C Values are
|
561
|
+
# 0x2C Values are separated by ,
|
557
562
|
# dsRecTypeStandard:Users The record type we're configuring
|
558
563
|
# 2 How many properties we're going to set
|
559
564
|
# dsAttrTypeStandard:RecordName Property 1: our users record name
|
@@ -597,7 +602,7 @@ class Chef
|
|
597
602
|
|
598
603
|
def run_sysadminctl(args)
|
599
604
|
# sysadminctl doesn't exit with a non-zero code when errors are encountered
|
600
|
-
# and
|
605
|
+
# and outputs everything to STDERR instead of STDOUT and STDERR. Therefore we'll
|
601
606
|
# return the STDERR and let the caller handle it.
|
602
607
|
shell_out!("sysadminctl", args).stderr
|
603
608
|
end
|