chef 18.10.17 → 19.2.12

data/lib/chef/resource/helpers/cron_validations.rb

@@ -1,5 +1,5 @@
 #
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");

data/lib/chef/resource/helpers/path_helpers.rb

@@ -0,0 +1,54 @@
+require "chef/mixin/which"
+
+class Chef
+  module ResourceHelpers
+    # Helpers for path manipulation
+    module PathHelpers
+      extend self
+      include Chef::Mixin::Which
+
+      # This method returns the absolute path to the chef-client binary that is currently executing.
+      # In a Habitat environment, you might have multiple versions of chef-client installed,
+      # we want to ensure we get the path to the one currently running.
+      #
+      # @return [String] The absolute path to the chef-client binary if found,
+      #   or an empty string if no valid binary path is detected.
+      # @example
+      #   chef_client_hab_binary_path
+      #   # => "/hab/pkgs/chef/chef-infra-client/19.10.0/20250822151044/bin/chef-client"
+      #   # Or on Windows:
+      #   # => "C:/hab/pkgs/chef/chef-infra-client/19.10.0/20250822151044/bin/chef-client"
+      def chef_client_hab_binary_path
+        path = File.realpath($PROGRAM_NAME)
+        bin = File.basename(path)
+
+        # On Windows, temporarily use the c:\\hab\\bin\\*.bat binstubs
+        bat_path = "C:\\hab\\bin\\#{ChefUtils::Dist::Infra::CLIENT}.bat"
+        return bat_path if File.exist?(bat_path) && ChefUtils.windows?
+
+        # return path for any bin/chef-* names
+        return path.sub(bin, ChefUtils::Dist::Infra::CLIENT) if bin =~ /^chef-[a-z-]+$/
+
+        # Return empty string if no valid path is found
+        ""
+      end
+
+      # once the binstubs under hab package have been fixed,
+      # restore this as the chef_client_hab_binary_path method
+      def chef_client_hab_package_binary_path
+        path = File.realpath($PROGRAM_NAME)
+        bin = File.basename(path)
+
+        return path.sub(bin, ChefUtils::Dist::Infra::CLIENT) if bin =~ /^chef-[a-z-]+$/
+
+        # Return empty string if no valid path is found
+        ""
+      end
+
+      def hab_executable_binary_path
+        # Find hab in PATH
+        which("hab") || ""
+      end
+    end
+  end
+end

data/lib/chef/resource/homebrew_cask.rb

@@ -2,7 +2,7 @@
 # Author:: Joshua Timberman (<jtimberman@chef.io>)
 # Author:: Graeme Mathieson (<mathie@woss.name>)
 #
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.

data/lib/chef/resource/homebrew_package.rb

@@ -2,7 +2,7 @@
 # Author:: Joshua Timberman (<joshua@chef.io>)
 # Author:: Graeme Mathieson (<mathie@woss.name>)
 #
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -31,33 +31,33 @@ class Chef
       description "Use the **homebrew_package** resource to manage packages for the macOS platform. Note: Starting with #{ChefUtils::Dist::Infra::PRODUCT} 16 the homebrew resource now accepts an array of packages for installing multiple packages at once."
       introduced "12.0"
       examples <<~DOC
-        **Install a package**:
+      **Install a package**:
 
-        ```ruby
-        homebrew_package 'git'
-        ```
+      ```ruby
+      homebrew_package 'git'
+      ```
 
-        **Install multiple packages at once**:
+      **Install multiple packages at once**:
 
-        ```ruby
-        homebrew_package %w(git fish ruby)
-        ```
+      ```ruby
+      homebrew_package %w(git fish ruby)
+      ```
 
-        **Specify the Homebrew user with a UUID**
+      **Specify the Homebrew user with a UUID**
 
-        ```ruby
-        homebrew_package 'git' do
-          homebrew_user 1001
-        end
-        ```
+      ```ruby
+      homebrew_package 'git' do
+        homebrew_user 1001
+      end
+      ```
 
-        **Specify the Homebrew user with a string**:
+      **Specify the Homebrew user with a string**:
 
-        ```ruby
-        homebrew_package 'vim' do
-          homebrew_user 'user1'
-        end
-        ```
+      ```ruby
+      homebrew_package 'vim' do
+        homebrew_user 'user1'
+      end
+      ```
       DOC
 
       allowed_actions :install, :upgrade, :remove, :purge

data/lib/chef/resource/homebrew_tap.rb

@@ -2,7 +2,7 @@
 # Author:: Joshua Timberman (<jtimberman@chef.io>)
 # Author:: Graeme Mathieson (<mathie@woss.name>)
 #
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -29,6 +29,14 @@ class Chef
       description "Use the **homebrew_tap** resource to add additional formula repositories to the Homebrew package manager."
       introduced "14.0"
 
+      examples <<~DOC
+      **Tap a repository**:
+
+      ```ruby
+      homebrew_tap 'apple/homebrew-apple'
+      ```
+      DOC
+
       include Chef::Mixin::Homebrew
 
       property :tap_name, String,
@@ -77,7 +85,7 @@ class Chef
       end
 
       action_class do
-        # Is the passed tap already tapped
+        # Check if the passed tap is already tapped
         #
         # @return [Boolean]
         def tapped?(name)

data/lib/chef/resource/homebrew_update.rb

@@ -2,7 +2,7 @@
 # Author:: Joshua Timberman (<jtimberman@chef.io>)
 # Author:: Dan Webb (<dan@webb-agile-solutions.ltd>)
 #
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 # Copyright:: Copyright (c) Webb Agile Solutions Ltd.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");

data/lib/chef/resource/hostname.rb

@@ -1,5 +1,5 @@
 #
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
@@ -24,7 +24,9 @@ class Chef
     # @since 14.0.0
     class Hostname < Chef::Resource
 
-      provides :hostname
+      provides :hostname, target_mode: true
+      target_mode support: :full,
+        platforms: %i{aix bsd linux macos_x solaris}
 
       description "Use the **hostname** resource to set the system's hostname, configure hostname and hosts config file, and re-run the Ohai hostname plugin so the hostname will be available in subsequent cookbooks."
       introduced "14.0"
@@ -99,7 +101,7 @@ class Chef
 
       action_class do
         def append_replacing_matching_lines(path, regex, string)
-          text = IO.read(path).split("\n")
+          text = TargetIO::IO.read(path).split("\n")
           text.reject! { |s| s =~ regex }
           text += [ string ]
           file path do
@@ -107,7 +109,7 @@ class Chef
             owner "root"
             group node["root_group"]
             mode "0644"
-            not_if { IO.read(path).split("\n").include?(string) }
+            not_if { TargetIO::IO.read(path).split("\n").include?(string) }
           end
         end
 
@@ -181,14 +183,14 @@ class Chef
             end
           when linux?
             case
-            when ::File.exist?("/usr/bin/hostnamectl") && !docker?
+            when ::TargetIO::File.exist?("/usr/bin/hostnamectl") && !docker?
               # use hostnamectl whenever we find it on linux (as systemd takes over the world)
               # this must come before other methods like /etc/hostname and /etc/sysconfig/network
               execute "hostnamectl set-hostname #{new_resource.hostname}" do
                 notifies :reload, "ohai[reload hostname]"
                 not_if { shell_out!("hostnamectl status", returns: [0, 1]).stdout =~ /Static hostname:\s*#{new_resource.hostname}\s*$/ }
               end
-            when ::File.exist?("/etc/hostname")
+            when ::TargetIO::File.exist?("/etc/hostname")
               # debian family uses /etc/hostname
               # arch also uses /etc/hostname
               # the "platform: iox_xr, platform_family: wrlinux, os: linux" platform also hits this
@@ -201,10 +203,10 @@ class Chef
                 group node["root_group"]
                 mode "0644"
               end
-            when ::File.file?("/etc/sysconfig/network")
+            when ::TargetIO::File.file?("/etc/sysconfig/network")
               # older non-systemd RHEL/Fedora derived
               append_replacing_matching_lines("/etc/sysconfig/network", /^HOSTNAME\s*=/, "HOSTNAME=#{new_resource.hostname}")
-            when ::File.exist?("/etc/HOSTNAME")
+            when ::TargetIO::File.exist?("/etc/HOSTNAME")
               # SuSE/openSUSE uses /etc/HOSTNAME
               file "/etc/HOSTNAME" do
                 content "#{new_resource.hostname}\n"
@@ -212,7 +214,7 @@ class Chef
                 group node["root_group"]
                 mode "0644"
               end
-            when ::File.exist?("/etc/conf.d/hostname")
+            when ::TargetIO::File.exist?("/etc/conf.d/hostname")
               # Gentoo
               file "/etc/conf.d/hostname" do
                 content "hostname=\"#{new_resource.hostname}\"\n"
@@ -226,7 +228,7 @@ class Chef
               # that manage sysctls on linux.
               append_replacing_matching_lines("/etc/sysctl.conf", /^\s+kernel\.hostname\s+=/, "kernel.hostname=#{new_resource.hostname}")
             end
-          when ::File.exist?("/etc/rc.conf")
+          when ::TargetIO::File.exist?("/etc/rc.conf")
             # *BSD systems with /etc/rc.conf + /etc/myname
             append_replacing_matching_lines("/etc/rc.conf", /^\s+hostname\s+=/, "hostname=#{new_resource.hostname}")
 
@@ -236,7 +238,7 @@ class Chef
               group node["root_group"]
               mode "0644"
             end
-          when ::File.exist?("/usr/sbin/svccfg") # solaris 5.11
+          when ::TargetIO::File.exist?("/usr/sbin/svccfg") # solaris 5.11
             execute "svccfg -s system/identity:node setprop config/nodename='#{new_resource.hostname}'" do
               notifies :run, "execute[svcadm refresh]", :immediately
               notifies :run, "execute[svcadm restart]", :immediately
@@ -259,6 +261,7 @@ class Chef
           WINDOWS_EC2_CONFIG = 'C:\Program Files\Amazon\Ec2ConfigService\Settings\config.xml'.freeze
 
           raise "Windows hostnames cannot contain a period." if new_resource.hostname.include?(".")
+          raise "Windows not supported in Target Mode" if ChefConfig::Config.target_mode?
 
           # suppress EC2 config service from setting our hostname
           if ::File.exist?(WINDOWS_EC2_CONFIG)

data/lib/chef/resource/http_request.rb

@@ -1,7 +1,7 @@
 #
 # Author:: Adam Jacob (<adam@chef.io>)
 # Author:: Tyler Cloke (<tyler@chef.io>)
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
@@ -23,7 +23,8 @@ class Chef
   class Resource
     class HttpRequest < Chef::Resource
 
-      provides :http_request
+      provides :http_request, target_mode: true
+      target_mode support: :full
 
       description "Use the **http_request** resource to send an HTTP request (`GET`, `PUT`, `POST`, `DELETE`, `HEAD`, or `OPTIONS`) with an arbitrary message. This resource is often useful when custom callbacks are necessary."
 
@@ -31,10 +32,10 @@ class Chef
       allowed_actions :get, :patch, :put, :post, :delete, :head, :options
 
       property :url, String, identity: true,
-        description: "The URL to which an HTTP request is sent."
+               description: "The URL to which an HTTP request is sent."
 
       property :headers, Hash, default: {},
-        description: "A Hash of custom headers."
+               description: "A Hash of custom headers."
 
       def initialize(name, run_context = nil)
         super

data/lib/chef/resource/ifconfig.rb

@@ -23,55 +23,56 @@ class Chef
   class Resource
     class Ifconfig < Chef::Resource
 
-      provides :ifconfig
+      provides :ifconfig, target_mode: true
+      target_mode support: :full
 
       description "Use the **ifconfig** resource to manage interfaces on Unix and Linux systems. Note: This resource requires the ifconfig binary to be present on the system and may require additional packages to be installed first. On Ubuntu 18.04 or later you will need to install the `ifupdown` package, which disables the built in Netplan functionality. Warning: This resource will not work with Fedora release 33 or later."
       examples <<~DOC
-        **Configure a network interface with a static IP**
+      **Configure a network interface with a static IP**
 
-        ```ruby
-        ifconfig '33.33.33.80' do
-          device 'eth1'
-        end
-        ```
+      ```ruby
+      ifconfig '33.33.33.80' do
+        device 'eth1'
+      end
+      ```
 
-        will create the following interface configuration:
+      will create the following interface configuration:
 
-        ```
-        iface eth1 inet static
-          address 33.33.33.80
-        ```
+      ```
+      iface eth1 inet static
+        address 33.33.33.80
+      ```
 
-        **Configure an interface to use DHCP**
+      **Configure an interface to use DHCP**
 
-        ```ruby
-        ifconfig 'Set eth1 to DHCP' do
-          device 'eth1'
-          bootproto 'dhcp'
-        end
-        ```
+      ```ruby
+      ifconfig 'Set eth1 to DHCP' do
+        device 'eth1'
+        bootproto 'dhcp'
+      end
+      ```
 
-        will create the following interface configuration:
+      will create the following interface configuration:
 
-        ```
-        iface eth1 inet dhcp
-        ```
+      ```
+      iface eth1 inet dhcp
+      ```
 
-        **Update a static IP address with a boot protocol**
+      **Update a static IP address with a boot protocol**
 
-        ```ruby
-        ifconfig "33.33.33.80" do
-          bootproto "dhcp"
-          device "eth1"
-        end
-        ```
+      ```ruby
+      ifconfig "33.33.33.80" do
+        bootproto "dhcp"
+        device "eth1"
+      end
+      ```
 
-        will update the interface configuration from static to dhcp:
+      will update the interface configuration from static to dhcp:
 
-        ```
-        iface eth1 inet dhcp
-          address 33.33.33.80
-        ```
+      ```
+      iface eth1 inet dhcp
+        address 33.33.33.80
+      ```
       DOC
 
       state_attrs :inet_addr, :mask

data/lib/chef/resource/inspec_input.rb

@@ -1,5 +1,5 @@
 #
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -19,61 +19,62 @@ require_relative "../resource"
 class Chef
   class Resource
     class InspecInput < Chef::Resource
-      provides :inspec_input
+      provides :inspec_input, target_mode: true
+      target_mode support: :full
 
       description "Use the **inspec_input** resource to add an input to the Compliance Phase."
       introduced "17.5"
       examples <<~DOC
 
-        **Activate the default input in the openssh cookbook's compliance segment**:
+      **Activate the default input in the openssh cookbook's compliance segment**:
 
-        ```ruby
-          inspec_input 'openssh' do
-            action :add
-          end
-        ```
+      ```ruby
+        inspec_input 'openssh' do
+          action :add
+        end
+      ```
 
-        **Activate all inputs in the openssh cookbook's compliance segment**:
+      **Activate all inputs in the openssh cookbook's compliance segment**:
 
-        ```ruby
-          inspec_input 'openssh::.*' do
-            action :add
-          end
-        ```
+      ```ruby
+        inspec_input 'openssh::.*' do
+          action :add
+        end
+      ```
 
-        **Add an InSpec input to the Compliance Phase from a hash**:
+      **Add an InSpec input to the Compliance Phase from a hash**:
 
-        ```ruby
-          inspec_input { ssh_custom_path: '/whatever2' }
-        ```
+      ```ruby
+        inspec_input { ssh_custom_path: '/whatever2' }
+      ```
 
-        **Add an InSpec input to the Compliance Phase using the 'name' property to identify the input**:
+      **Add an InSpec input to the Compliance Phase using the 'name' property to identify the input**:
 
-        ```ruby
-          inspec_input "setting my input" do
-            source( { ssh_custom_path: '/whatever2' })
-          end
-        ```
+      ```ruby
+        inspec_input "setting my input" do
+          source( { ssh_custom_path: '/whatever2' })
+        end
+      ```
 
-        **Add an InSpec input to the Compliance Phase using a TOML, JSON, or YAML file**:
+      **Add an InSpec input to the Compliance Phase using a TOML, JSON, or YAML file**:
 
-        ```ruby
-          inspec_input "/path/to/my/input.yml"
-        ```
+      ```ruby
+        inspec_input "/path/to/my/input.yml"
+      ```
 
-        **Add an InSpec input to the Compliance Phase using a TOML, JSON, or YAML file, using the 'name' property**:
+      **Add an InSpec input to the Compliance Phase using a TOML, JSON, or YAML file, using the 'name' property**:
 
-        ```ruby
-          inspec_input "setting my input" do
-            source "/path/to/my/input.yml"
-          end
-        ```
+      ```ruby
+        inspec_input "setting my input" do
+          source "/path/to/my/input.yml"
+        end
+      ```
 
-        Note that the **inspec_input** resource does not update and will not fire notifications (similar to the log resource). This is done to preserve the ability to use
-        the resource while not causing the updated resource count to be larger than zero. Since the resource does not update the state of the managed node, this behavior
-        is still consistent with the configuration management model. Instead, you should use events to observe configuration changes for the compliance phase. It is
-        possible to use the `notify_group` resource to chain notifications of the two resources, but notifications are the wrong model to use, and you should use pure ruby
-        conditionals instead. Compliance configuration should be independent of other resources and should only be conditional based on state/attributes, not other resources.
+      Note that the **inspec_input** resource does not update and will not fire notifications (similar to the log resource). This is done to preserve the ability to use
+      the resource while not causing the updated resource count to be larger than zero. Since the resource does not update the state of the managed node, this behavior
+      is still consistent with the configuration management model. Instead, you should use events to observe configuration changes for the compliance phase. It is
+      possible to use the `notify_group` resource to chain notifications of the two resources, but notifications are the wrong model to use, and you should use pure ruby
+      conditionals instead. Compliance configuration should be independent of other resources and should only be conditional based on state/attributes, not other resources.
       DOC
 
       property :name, [ Hash, String ]
@@ -105,6 +106,8 @@ class Chef
         def build_source
           return new_resource.source unless new_resource.source.nil?
           return nil unless new_resource.input.count(::File::SEPARATOR) > 0 || (::File::ALT_SEPARATOR && new_resource.input.count(::File::ALT_SEPARATOR) > 0 )
+
+          # InSpec gets processed locally, so no TargetIO
           return nil unless ::File.exist?(new_resource.input)
 
           new_resource.input