chef 18.10.17 → 19.1.164

data/lib/chef/resource/habitat_config.rb

@@ -1,4 +1,4 @@
-# Copyright:: Chef Software Inc.
+#  Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
@@ -17,27 +17,30 @@ require_relative "../http"
 require_relative "../json_compat"
 require_relative "../resource"
 
+require "tmpdir" unless defined?(Dir::Tmpname)
+
 class Chef
   class Resource
     class HabitatConfig < Chef::Resource
 
-      provides :habitat_config
+      provides :habitat_config, target_mode: true
+      target_mode support: :full
 
       description "Use the **habitat_config** resource to apply a configuration to a Chef Habitat service."
       introduced "17.3"
       examples <<~DOC
-        **Configure your nginx defaults**
-
-        ```ruby
-        habitat_config 'nginx.default' do
-          config({
-            worker_count: 2,
-            http: {
-              keepalive_timeout: 120
-            }
-            })
-          end
-          ```
+      **Configure your nginx defaults**
+
+      ```ruby
+      habitat_config 'nginx.default' do
+        config({
+          worker_count: 2,
+          http: {
+            keepalive_timeout: 120
+          }
+          })
+        end
+        ```
       DOC
 
       property :config, Mash, required: true, coerce: proc { |m| m.is_a?(Hash) ? Mash.new(m) : m },
@@ -60,12 +63,23 @@ class Chef
         description: "Name of user key to use for encryption. Passes `--user` to `hab config apply`."
 
       load_current_value do
+        def census(http_uri)
+          headers = {}
+          headers["Authorization"] = "Bearer #{gateway_auth_token}" if property_is_set?(:gateway_auth_token)
+
+          if Chef::Config.target_mode?
+            raw = TargetIO::HTTP.new(http_uri).get("/census", headers)
+            response = from_json(raw)
+          else
+            response = Chef::HTTP::SimpleJSON.new(http_uri).get("/census", headers)
+          end
+
+          Mash.new(response)
+        end
+
         http_uri = "http://#{remote_sup_http}"
 
         begin
-          headers = {}
-          headers["Authorization"] = "Bearer #{gateway_auth_token}" if property_is_set?(:gateway_auth_token)
-          census = Mash.new(Chef::HTTP::SimpleJSON.new(http_uri).get("/census", headers))
           sc = census["census_groups"][service_group]["service_config"]["value"]
         rescue
           # Default to a blank config if anything (http error, json parsing, finding
@@ -85,15 +99,15 @@ class Chef
           opts << ["--remote-sup", new_resource.remote_sup] if new_resource.remote_sup
           opts << ["--user", new_resource.user] if new_resource.user
 
-          tempfile = Tempfile.new(["habitat_config", ".toml"])
-          begin
+          tempname = Dir::Tmpname.create(["habitat_config", ".toml"]) {}
+          TargetIO::File.open(tempname, "w") do |tempfile|
             tempfile.write(render_toml(new_resource.config))
-            tempfile.close
+          end
 
-            hab("config", "apply", opts, new_resource.service_group, incarnation, tempfile.path)
+          begin
+            hab("config", "apply", opts, new_resource.service_group, incarnation, tempname)
           ensure
-            tempfile.close
-            tempfile.unlink
+            TargetIO::File.unlink(tempname)
           end
         end
       end

data/lib/chef/resource/habitat_install.rb

@@ -1,5 +1,5 @@
 #
-# Copyright:: Chef Software, Inc.
+#  Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
@@ -19,33 +19,34 @@ require_relative "../resource"
 class Chef
   class Resource
     class HabitatInstall < Chef::Resource
-      provides :habitat_install
+      provides :habitat_install, target_mode: true
+      target_mode support: :full
 
       description "Use the **habitat_install** resource to install Chef Habitat."
       introduced "17.3"
       examples <<~DOC
-        **Installation Without a Resource Name**
+      **Installation Without a Resource Name**
 
-        ```ruby
-        habitat_install
-        ```
+      ```ruby
+      habitat_install
+      ```
 
-        **Installation specifying a habitat builder URL**
+      **Installation specifying a habitat builder URL**
 
-        ```ruby
-        habitat_install 'install habitat' do
-          bldr_url 'http://localhost'
-        end
-        ```
+      ```ruby
+      habitat_install 'install habitat' do
+        bldr_url 'http://localhost'
+      end
+      ```
 
-        **Installation specifying version and habitat builder URL**
+      **Installation specifying version and habitat builder URL**
 
-        ```ruby
-        habitat_install 'install habitat' do
-          bldr_url 'http://localhost'
-          hab_version '1.5.50'
-        end
-        ```
+      ```ruby
+      habitat_install 'install habitat' do
+        bldr_url 'http://localhost'
+        hab_version '1.5.50'
+      end
+      ```
       DOC
 
       property :name, String, default: "install habitat",
@@ -70,7 +71,7 @@ class Chef
         description: "Specify the version of `Habitat` you would like to install."
 
       action :install, description: "Installs Habitat. Does nothing if the `hab` binary is found in the default location for the system (`/bin/hab` on Linux, `/usr/local/bin/hab` on macOS, `C:/habitat/hab.exe` on Windows)" do
-        if ::File.exist?(hab_path)
+        if ::TargetIO::File.exist?(hab_path)
           cmd = shell_out!([hab_path, "--version"].flatten.compact.join(" "))
           version = %r{hab (\d*\.\d*\.\d[^\/]*)}.match(cmd.stdout)[1]
           return if version == new_resource.hab_version
@@ -94,7 +95,7 @@ class Chef
             path habfile
             destination "#{Chef::Config[:file_cache_path]}/habitat"
             action :extract
-            not_if { ::Dir.exist?("c:\\habitat") }
+            not_if { ::TargetIO::Dir.exist?("c:\\habitat") }
           end
 
           directory "c:\\habitat" do
@@ -238,7 +239,6 @@ class Chef
         def hab_command
           cmd = "#{Chef::Config[:file_cache_path]}/hab-install.sh"
           cmd << " -v #{new_resource.hab_version} " if new_resource.hab_version
-          cmd << " -t x86_64-linux-kernel2" if node["kernel"]["release"].to_i < 3
           cmd
         end
       end

data/lib/chef/resource/habitat_service.rb

@@ -1,4 +1,4 @@
-# Copyright:: Chef Software, Inc.
+#  Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
@@ -20,7 +20,8 @@ require "chef-utils/dist" unless defined?(ChefUtils::Dist)
 class Chef
   class Resource
     class HabitatService < Chef::Resource
-      provides :habitat_service
+      provides :habitat_service, target_mode: true
+      target_mode support: :full
 
       description "Use the **habitat_service** resource to manage Chef Habitat services. This requires that `core/hab-sup` be running as a service. See the `habitat_sup` resource documentation for more information. Note: Applications may run as a specific user. Often with Habitat, the default is `hab`, or `root`. If the application requires another user, then it should be created with Chef's `user` resource."
       introduced "17.3"
@@ -181,7 +182,7 @@ class Chef
         http_uri = "http://#{remote_sup_http}"
 
         begin
-          TCPSocket.new(URI(http_uri).host, URI(http_uri).port).close
+          TCPSocket.new(URI(http_uri).host, URI(http_uri).port).close unless Chef::Config.target_mode?
         rescue Errno::ECONNREFUSED, Errno::EHOSTUNREACH
           Chef::Log.debug("Could not connect to #{http_uri} to retrieve status for #{service_name}")
           return false
@@ -190,7 +191,7 @@ class Chef
         begin
           headers = {}
           headers["Authorization"] = "Bearer #{gateway_auth_token}" if property_is_set?(:gateway_auth_token)
-          svcs = Chef::HTTP::SimpleJSON.new(http_uri).get("/services", headers)
+          svcs = TargetIO::HTTP::SimpleJSON.new(http_uri).get("/services", headers)
         rescue
           Chef::Log.debug("Could not connect to #{http_uri}/services to retrieve status for #{service_name}")
           return false
@@ -337,10 +338,13 @@ class Chef
         end
 
         unless current_resource.loaded && !modified
-          execute "test" do
+          execute "load service" do
             command "hab svc load #{new_resource.service_name} #{options.join(" ")}"
             retry_delay 10
             retries 5
+
+            # compensate for lack of TCPSocket support in TM by retries
+            returns [0, 1] if Chef::Config.target_mode?
           end
         end
       end

data/lib/chef/resource/habitat_user_toml.rb

@@ -1,4 +1,4 @@
-# Copyright:: Chef Software Inc.
+#  Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
@@ -21,18 +21,18 @@ class Chef
       description "Use the **habitat_user_toml** to template a `user.toml` for Chef Habitat services. Configurations set in the  `user.toml` override the `default.toml` for a given package, which makes it an alternative to applying service group level configuration."
       introduced "17.3"
       examples <<~DOC
-        **Configure user specific settings to nginx**
+      **Configure user specific settings to nginx**
 
-        ```ruby
-        habitat_user_toml 'nginx' do
-          config({
-            worker_count: 2,
-            http: {
-              keepalive_timeout: 120
-            }
-            })
-          end
-          ```
+      ```ruby
+      habitat_user_toml 'nginx' do
+        config({
+          worker_count: 2,
+          http: {
+            keepalive_timeout: 120
+          }
+          })
+        end
+        ```
       DOC
 
       property :config, Mash, required: true, coerce: proc { |m| m.is_a?(Hash) ? Mash.new(m) : m },

data/lib/chef/resource/helpers/cron_validations.rb

@@ -1,5 +1,5 @@
 #
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");

data/lib/chef/resource/helpers/path_helpers.rb

@@ -0,0 +1,52 @@
+require "chef/mixin/which"
+
+class Chef
+  module ResourceHelpers
+    # Helpers for path manipulation
+    module PathHelpers
+      extend self
+      include Chef::Mixin::Which
+
+      # This method returns the absolute path to the chef-client binary that is currently executing.
+      # In a Habitat environment, you might have multiple versions of chef-client installed,
+      # we want to ensure we get the path to the one currently running.
+      #
+      # @return [String] The absolute path to the chef-client binary if found,
+      #   or an empty string if no valid binary path is detected.
+      # @example
+      #   chef_client_hab_binary_path
+      #   # => "/hab/pkgs/chef/chef-infra-client/19.10.0/20250822151044/bin/chef-client"
+      #   # Or on Windows:
+      #   # => "C:/hab/pkgs/chef/chef-infra-client/19.10.0/20250822151044/bin/chef-client"
+      def chef_client_hab_binary_path
+        path = File.realpath($PROGRAM_NAME)
+        bin = File.basename(path)
+
+        # On Windows, temporarily use the c:\\hab\\bin\\*.bat binstubs
+        bat_path = "C:\\hab\\bin\\#{bin}.bat"
+        return bat_path if File.exist?(bat_path) && ChefUtils.windows?
+        return path if bin == "#{ChefUtils::Dist::Infra::CLIENT}"
+
+        # Return empty string if no valid path is found
+        ""
+      end
+
+      # once the binstubs under hab package have been fixed,
+      # restore this as the chef_client_hab_binary_path method
+      def chef_client_hab_package_binary_path
+        path = File.realpath($PROGRAM_NAME)
+        bin = File.basename(path)
+
+        return path if bin == "#{ChefUtils::Dist::Infra::CLIENT}"
+
+        # Return empty string if no valid path is found
+        ""
+      end
+
+      def hab_executable_binary_path
+        # Find hab in PATH
+        which("hab") || ""
+      end
+    end
+  end
+end

data/lib/chef/resource/homebrew_cask.rb

@@ -2,7 +2,7 @@
 # Author:: Joshua Timberman (<jtimberman@chef.io>)
 # Author:: Graeme Mathieson (<mathie@woss.name>)
 #
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.

data/lib/chef/resource/homebrew_package.rb

@@ -2,7 +2,7 @@
 # Author:: Joshua Timberman (<joshua@chef.io>)
 # Author:: Graeme Mathieson (<mathie@woss.name>)
 #
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -31,33 +31,33 @@ class Chef
       description "Use the **homebrew_package** resource to manage packages for the macOS platform. Note: Starting with #{ChefUtils::Dist::Infra::PRODUCT} 16 the homebrew resource now accepts an array of packages for installing multiple packages at once."
       introduced "12.0"
       examples <<~DOC
-        **Install a package**:
+      **Install a package**:
 
-        ```ruby
-        homebrew_package 'git'
-        ```
+      ```ruby
+      homebrew_package 'git'
+      ```
 
-        **Install multiple packages at once**:
+      **Install multiple packages at once**:
 
-        ```ruby
-        homebrew_package %w(git fish ruby)
-        ```
+      ```ruby
+      homebrew_package %w(git fish ruby)
+      ```
 
-        **Specify the Homebrew user with a UUID**
+      **Specify the Homebrew user with a UUID**
 
-        ```ruby
-        homebrew_package 'git' do
-          homebrew_user 1001
-        end
-        ```
+      ```ruby
+      homebrew_package 'git' do
+        homebrew_user 1001
+      end
+      ```
 
-        **Specify the Homebrew user with a string**:
+      **Specify the Homebrew user with a string**:
 
-        ```ruby
-        homebrew_package 'vim' do
-          homebrew_user 'user1'
-        end
-        ```
+      ```ruby
+      homebrew_package 'vim' do
+        homebrew_user 'user1'
+      end
+      ```
       DOC
 
       allowed_actions :install, :upgrade, :remove, :purge

data/lib/chef/resource/homebrew_tap.rb

@@ -2,7 +2,7 @@
 # Author:: Joshua Timberman (<jtimberman@chef.io>)
 # Author:: Graeme Mathieson (<mathie@woss.name>)
 #
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -29,6 +29,14 @@ class Chef
       description "Use the **homebrew_tap** resource to add additional formula repositories to the Homebrew package manager."
       introduced "14.0"
 
+      examples <<~DOC
+      **Tap a repository**:
+
+      ```ruby
+      homebrew_tap 'apple/homebrew-apple'
+      ```
+      DOC
+
       include Chef::Mixin::Homebrew
 
       property :tap_name, String,
@@ -77,7 +85,7 @@ class Chef
       end
 
       action_class do
-        # Is the passed tap already tapped
+        # Check if the passed tap is already tapped
         #
         # @return [Boolean]
         def tapped?(name)

data/lib/chef/resource/homebrew_update.rb

@@ -2,7 +2,7 @@
 # Author:: Joshua Timberman (<jtimberman@chef.io>)
 # Author:: Dan Webb (<dan@webb-agile-solutions.ltd>)
 #
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 # Copyright:: Copyright (c) Webb Agile Solutions Ltd.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");

data/lib/chef/resource/hostname.rb

@@ -1,5 +1,5 @@
 #
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
@@ -24,7 +24,9 @@ class Chef
     # @since 14.0.0
     class Hostname < Chef::Resource
 
-      provides :hostname
+      provides :hostname, target_mode: true
+      target_mode support: :full,
+        platforms: %i{aix bsd linux macos_x solaris}
 
       description "Use the **hostname** resource to set the system's hostname, configure hostname and hosts config file, and re-run the Ohai hostname plugin so the hostname will be available in subsequent cookbooks."
       introduced "14.0"
@@ -99,7 +101,7 @@ class Chef
 
       action_class do
         def append_replacing_matching_lines(path, regex, string)
-          text = IO.read(path).split("\n")
+          text = TargetIO::IO.read(path).split("\n")
           text.reject! { |s| s =~ regex }
           text += [ string ]
           file path do
@@ -107,7 +109,7 @@ class Chef
             owner "root"
             group node["root_group"]
             mode "0644"
-            not_if { IO.read(path).split("\n").include?(string) }
+            not_if { TargetIO::IO.read(path).split("\n").include?(string) }
           end
         end
 
@@ -181,14 +183,14 @@ class Chef
             end
           when linux?
             case
-            when ::File.exist?("/usr/bin/hostnamectl") && !docker?
+            when ::TargetIO::File.exist?("/usr/bin/hostnamectl") && !docker?
               # use hostnamectl whenever we find it on linux (as systemd takes over the world)
               # this must come before other methods like /etc/hostname and /etc/sysconfig/network
               execute "hostnamectl set-hostname #{new_resource.hostname}" do
                 notifies :reload, "ohai[reload hostname]"
                 not_if { shell_out!("hostnamectl status", returns: [0, 1]).stdout =~ /Static hostname:\s*#{new_resource.hostname}\s*$/ }
               end
-            when ::File.exist?("/etc/hostname")
+            when ::TargetIO::File.exist?("/etc/hostname")
               # debian family uses /etc/hostname
               # arch also uses /etc/hostname
               # the "platform: iox_xr, platform_family: wrlinux, os: linux" platform also hits this
@@ -201,10 +203,10 @@ class Chef
                 group node["root_group"]
                 mode "0644"
               end
-            when ::File.file?("/etc/sysconfig/network")
+            when ::TargetIO::File.file?("/etc/sysconfig/network")
               # older non-systemd RHEL/Fedora derived
               append_replacing_matching_lines("/etc/sysconfig/network", /^HOSTNAME\s*=/, "HOSTNAME=#{new_resource.hostname}")
-            when ::File.exist?("/etc/HOSTNAME")
+            when ::TargetIO::File.exist?("/etc/HOSTNAME")
               # SuSE/openSUSE uses /etc/HOSTNAME
               file "/etc/HOSTNAME" do
                 content "#{new_resource.hostname}\n"
@@ -212,7 +214,7 @@ class Chef
                 group node["root_group"]
                 mode "0644"
               end
-            when ::File.exist?("/etc/conf.d/hostname")
+            when ::TargetIO::File.exist?("/etc/conf.d/hostname")
               # Gentoo
               file "/etc/conf.d/hostname" do
                 content "hostname=\"#{new_resource.hostname}\"\n"
@@ -226,7 +228,7 @@ class Chef
               # that manage sysctls on linux.
               append_replacing_matching_lines("/etc/sysctl.conf", /^\s+kernel\.hostname\s+=/, "kernel.hostname=#{new_resource.hostname}")
             end
-          when ::File.exist?("/etc/rc.conf")
+          when ::TargetIO::File.exist?("/etc/rc.conf")
             # *BSD systems with /etc/rc.conf + /etc/myname
             append_replacing_matching_lines("/etc/rc.conf", /^\s+hostname\s+=/, "hostname=#{new_resource.hostname}")
 
@@ -236,7 +238,7 @@ class Chef
               group node["root_group"]
               mode "0644"
             end
-          when ::File.exist?("/usr/sbin/svccfg") # solaris 5.11
+          when ::TargetIO::File.exist?("/usr/sbin/svccfg") # solaris 5.11
             execute "svccfg -s system/identity:node setprop config/nodename='#{new_resource.hostname}'" do
               notifies :run, "execute[svcadm refresh]", :immediately
               notifies :run, "execute[svcadm restart]", :immediately
@@ -259,6 +261,7 @@ class Chef
           WINDOWS_EC2_CONFIG = 'C:\Program Files\Amazon\Ec2ConfigService\Settings\config.xml'.freeze
 
           raise "Windows hostnames cannot contain a period." if new_resource.hostname.include?(".")
+          raise "Windows not supported in Target Mode" if ChefConfig::Config.target_mode?
 
           # suppress EC2 config service from setting our hostname
           if ::File.exist?(WINDOWS_EC2_CONFIG)

data/lib/chef/resource/http_request.rb

@@ -1,7 +1,7 @@
 #
 # Author:: Adam Jacob (<adam@chef.io>)
 # Author:: Tyler Cloke (<tyler@chef.io>)
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
@@ -23,7 +23,8 @@ class Chef
   class Resource
     class HttpRequest < Chef::Resource
 
-      provides :http_request
+      provides :http_request, target_mode: true
+      target_mode support: :full
 
       description "Use the **http_request** resource to send an HTTP request (`GET`, `PUT`, `POST`, `DELETE`, `HEAD`, or `OPTIONS`) with an arbitrary message. This resource is often useful when custom callbacks are necessary."
 
@@ -31,10 +32,10 @@ class Chef
       allowed_actions :get, :patch, :put, :post, :delete, :head, :options
 
       property :url, String, identity: true,
-        description: "The URL to which an HTTP request is sent."
+               description: "The URL to which an HTTP request is sent."
 
       property :headers, Hash, default: {},
-        description: "A Hash of custom headers."
+               description: "A Hash of custom headers."
 
       def initialize(name, run_context = nil)
         super