chef 18.10.17 → 19.2.12

data/lib/chef/resource/scm/git.rb

@@ -1,6 +1,6 @@
 #
 # Author:: Daniel DeLeo (<dan@kallistec.com>)
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
@@ -23,89 +23,90 @@ class Chef
     class Git < Chef::Resource
       use "scm"
 
-      provides :git
+      provides :git, target_mode: true
+      target_mode support: :full
 
       description "Use the **git** resource to manage source control resources that exist in a git repository. git version 1.6.5 (or higher) is required to use all of the functionality in the git resource."
       examples <<~DOC
-        **Use the git mirror**
-
-        ```ruby
-        git '/opt/my_sources/couch' do
-          repository 'git://git.apache.org/couchdb.git'
-          revision 'master'
-          action :sync
-        end
-        ```
-
-        **Use different branches**
-
-        To use different branches, depending on the environment of the node:
-
-        ```ruby
-        branch_name = if node.chef_environment == 'QA'
-                        'staging'
-                      else
-                        'master'
-                      end
-
-        git '/home/user/deployment' do
-           repository 'git@github.com:git_site/deployment.git'
-           revision branch_name
-           action :sync
-           user 'user'
-           group 'test'
-        end
-        ```
-
-        Where the `branch_name` variable is set to staging or master, depending on the environment of the node. Once this is determined, the `branch_name` variable is used to set the revision for the repository. If the git status command is used after running the example above, it will return the branch name as `deploy`, as this is the default value. Run Chef Infra Client in debug mode to verify that the correct branches are being checked out:
-
-        ```
-        sudo chef-client -l debug
-        ```
-
-        **Install an application from git using bash**
-
-        The following example shows how Bash can be used to install a plug-in for rbenv named ruby-build, which is located in git version source control. First, the application is synchronized, and then Bash changes its working directory to the location in which ruby-build is located, and then runs a command.
-
-        ```ruby
-        git "#{Chef::Config[:file_cache_path]}/ruby-build" do
-          repository 'git://github.com/rbenv/ruby-build.git'
-          revision 'master'
-          action :sync
-        end
-
-        bash 'install_ruby_build' do
-          cwd "#{Chef::Config[:file_cache_path]}/ruby-build"
-          user 'rbenv'
-          group 'rbenv'
-          code <<-EOH
-            ./install.sh
-            EOH
-          environment 'PREFIX' => '/usr/local'
-        end
-        ```
-
-        **Notify a resource post-checkout**
-
-        ```ruby
-        git "#{Chef::Config[:file_cache_path]}/my_app" do
-          repository node['my_app']['git_repository']
-          revision node['my_app']['git_revision']
-          action :sync
-          notifies :run, 'bash[compile_my_app]', :immediately
-        end
-        ```
-
-        **Pass in environment variables**
-
-        ```ruby
-        git '/opt/my_sources/couch' do
-          repository 'git://git.apache.org/couchdb.git'
-          revision 'master'
-          environment 'VAR' => 'whatever'
-          action :sync
-        end
-        ```
+      **Use the git mirror**
+
+      ```ruby
+      git '/opt/my_sources/couch' do
+        repository 'git://git.apache.org/couchdb.git'
+        revision 'master'
+        action :sync
+      end
+      ```
+
+      **Use different branches**
+
+      To use different branches, depending on the environment of the node:
+
+      ```ruby
+      branch_name = if node.chef_environment == 'QA'
+                      'staging'
+                    else
+                      'master'
+                    end
+
+      git '/home/user/deployment' do
+         repository 'git@github.com:git_site/deployment.git'
+         revision branch_name
+         action :sync
+         user 'user'
+         group 'test'
+      end
+      ```
+
+      Where the `branch_name` variable is set to staging or master, depending on the environment of the node. Once this is determined, the `branch_name` variable is used to set the revision for the repository. If the git status command is used after running the example above, it will return the branch name as `deploy`, as this is the default value. Run Chef Infra Client in debug mode to verify that the correct branches are being checked out:
+
+      ```
+      sudo chef-client -l debug
+      ```
+
+      **Install an application from git using bash**
+
+      The following example shows how Bash can be used to install a plug-in for rbenv named ruby-build, which is located in git version source control. First, the application is synchronized, and then Bash changes its working directory to the location in which ruby-build is located, and then runs a command.
+
+      ```ruby
+      git "\#{Chef::Config[:file_cache_path]}/ruby-build" do
+        repository 'git://github.com/rbenv/ruby-build.git'
+        revision 'master'
+        action :sync
+      end
+
+      bash 'install_ruby_build' do
+        cwd "\#{Chef::Config[:file_cache_path]}/ruby-build"
+        user 'rbenv'
+        group 'rbenv'
+        code <<-EOH
+          ./install.sh
+          EOH
+        environment 'PREFIX' => '/usr/local'
+      end
+      ```
+
+      **Notify a resource post-checkout**
+
+      ```ruby
+      git "\#{Chef::Config[:file_cache_path]}/my_app" do
+        repository node['my_app']['git_repository']
+        revision node['my_app']['git_revision']
+        action :sync
+        notifies :run, 'bash[compile_my_app]', :immediately
+      end
+      ```
+
+      **Pass in environment variables**
+
+      ```ruby
+      git '/opt/my_sources/couch' do
+        repository 'git://git.apache.org/couchdb.git'
+        revision 'master'
+        environment 'VAR' => 'whatever'
+        action :sync
+      end
+      ```
       DOC
 
       property :additional_remotes, Hash,

data/lib/chef/resource/scm/subversion.rb

@@ -1,7 +1,7 @@
 #
 # Author:: Daniel DeLeo (<dan@kallistec.com>)
 # Author:: Tyler Cloke (<tyler@chef.io>)
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
@@ -24,20 +24,21 @@ class Chef
     class Subversion < Chef::Resource
       use "scm"
 
-      provides :subversion
+      provides :subversion, target_mode: true
+      target_mode support: :full
 
       description "Use the **subversion** resource to manage source control resources that exist in a Subversion repository. Warning: The subversion resource has known bugs and may not work as expected. For more information see Chef GitHub issues, particularly [#4050](https://github.com/chef/chef/issues/4050) and [#4257](https://github.com/chef/chef/issues/4257)."
       examples <<~DOC
-        **Get the latest version of an application**
+      **Get the latest version of an application**
 
-        ```ruby
-        subversion 'CouchDB Edge' do
-          repository 'http://svn.apache.org/repos/asf/couchdb/trunk'
-          revision 'HEAD'
-          destination '/opt/my_sources/couch'
-          action :sync
-        end
-        ```
+      ```ruby
+      subversion 'CouchDB Edge' do
+        repository 'http://svn.apache.org/repos/asf/couchdb/trunk'
+        revision 'HEAD'
+        destination '/opt/my_sources/couch'
+        action :sync
+      end
+      ```
       DOC
 
       allowed_actions :force_export

data/lib/chef/resource/script.rb

@@ -1,7 +1,7 @@
 #
 # Author:: Adam Jacob (<adam@chef.io>)
 # Author:: Tyler Cloke (<tyler@chef.io>)
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
@@ -23,7 +23,9 @@ class Chef
   class Resource
     class Script < Chef::Resource::Execute
 
-      provides :script
+      provides :script, target_mode: true
+      target_mode support: :full,
+        description: "Needs interpreter installed on target node."
 
       identity_attr :name
 

data/lib/chef/resource/selinux/common_helpers.rb

@@ -40,7 +40,7 @@ class Chef
       def selinux_activate_required?
         return false unless platform_family?("debian")
 
-        !File.read("/etc/default/grub").match?("security=selinux")
+        !TargetIO::File.read("/etc/default/grub").match?("security=selinux")
       end
     end
   end

data/lib/chef/resource/selinux/selinux_debian.erb

@@ -15,4 +15,4 @@ SELINUX=<%= @selinux %>
 SELINUXTYPE=<%= @selinuxtype %>
 
 # SETLOCALDEFS= Check local definition changes
-SETLOCALDEFS=0
+SETLOCALDEFS=0

data/lib/chef/resource/selinux/selinux_default.erb

@@ -12,4 +12,4 @@ SELINUX=<%= @selinux %>
 #     targeted - Targeted processes are protected,
 #     minimum - Modification of targeted policy. Only selected processes are protected.
 #     mls - Multi Level Security protection.
-SELINUXTYPE=<%= @selinuxtype %>
+SELINUXTYPE=<%= @selinuxtype %>

data/lib/chef/resource/selinux_boolean.rb

@@ -20,26 +20,27 @@ class Chef
     class SelinuxBoolean < Chef::Resource
       unified_mode true
 
-      provides :selinux_boolean
+      provides :selinux_boolean, target_mode: true
+      target_mode support: :full
 
       description "Use **selinux_boolean** resource to set SELinux boolean values."
       introduced "18.0"
       examples <<~DOC
-        **Set ssh_keysign to true**:
+      **Set ssh_keysign to true**:
 
-        ```ruby
-        selinux_boolean 'ssh_keysign' do
-          value true
-        end
-        ```
+      ```ruby
+      selinux_boolean 'ssh_keysign' do
+        value true
+      end
+      ```
 
-        **Set ssh_sysadm_login to 'on'**:
+      **Set ssh_sysadm_login to 'on'**:
 
-        ```ruby
-        selinux_boolean 'ssh_sysadm_login' do
-          value 'on'
-        end
-        ```
+      ```ruby
+      selinux_boolean 'ssh_sysadm_login' do
+        value 'on'
+      end
+      ```
       DOC
 
       property :boolean, String,

data/lib/chef/resource/selinux_fcontext.rb

@@ -20,41 +20,42 @@ class Chef
     class SelinuxFcontext < Chef::Resource
       unified_mode true
 
-      provides :selinux_fcontext
+      provides :selinux_fcontext, target_mode: true
+      target_mode support: :full
 
       description "Use the **selinux_fcontext** resource to set the SELinux context of files using the `semanage fcontext` command."
       introduced "18.0"
       examples <<~DOC
-        **Allow http servers (e.g. nginx/apache) to modify moodle files**:
+      **Allow http servers (e.g. nginx/apache) to modify moodle files**:
 
-        ```ruby
-        selinux_fcontext '/var/www/moodle(/.*)?' do
-          secontext 'httpd_sys_rw_content_t'
-        end
-        ```
+      ```ruby
+      selinux_fcontext '/var/www/moodle(/.*)?' do
+        secontext 'httpd_sys_rw_content_t'
+      end
+      ```
 
-        **Adapt a symbolic link**:
+      **Adapt a symbolic link**:
 
-        ```ruby
-        selinux_fcontext '/var/www/symlink_to_webroot' do
-          secontext 'httpd_sys_rw_content_t'
-          file_type 'l'
-        end
-        ```
+      ```ruby
+      selinux_fcontext '/var/www/symlink_to_webroot' do
+        secontext 'httpd_sys_rw_content_t'
+        file_type 'l'
+      end
+      ```
       DOC
 
       property :file_spec, String,
-        name_property: true,
-        description: "Path to or regex matching the files or directories to label."
+                name_property: true,
+                description: "Path to or regex matching the files or directories to label."
 
       property :secontext, String,
-        required: %i{add modify manage},
-        description: "SELinux context to assign."
+                required: %i{add modify manage},
+                description: "SELinux context to assign."
 
       property :file_type, String,
-        default: "a",
-        equal_to: %w{a f d c b s l p},
-        description: "The type of the file being labeled."
+                default: "a",
+                equal_to: %w{a f d c b s l p},
+                description: "The type of the file being labeled."
 
       action_class do
         include Chef::SELinux::CommonHelpers
@@ -95,7 +96,7 @@ class Chef
           # if path is not absolute, ignore it and search everything
           common = "/" if common[0] != "/"
 
-          if ::File.exist? common
+          if ::TargetIO::File.exist? common
             shell_out!("find #{common.shellescape} -ignore_readdir_race -regextype posix-egrep -regex #{spec.shellescape} -prune -print0 | xargs -0 restorecon -iRv")
           end
         end

data/lib/chef/resource/selinux_install.rb

@@ -18,36 +18,37 @@ class Chef
     class SelinuxInstall < Chef::Resource
       unified_mode true
 
-      provides :selinux_install
+      provides :selinux_install, target_mode: true
+      target_mode support: :full
 
       description "Use **selinux_install** resource to encapsulates the set of selinux packages to install in order to manage selinux. It also ensures the directory `/etc/selinux` is created."
       introduced "18.0"
       examples <<~DOC
-        **Default installation**:
+      **Default installation**:
 
-        ```ruby
-        selinux_install 'example'
-        ```
+      ```ruby
+      selinux_install 'example'
+      ```
 
-        **Install with custom packages**:
+      **Install with custom packages**:
 
-        ```ruby
-        selinux_install 'example' do
-          packages %w(policycoreutils selinux-policy selinux-policy-targeted)
-        end
-        ```
+      ```ruby
+      selinux_install 'example' do
+        packages %w(policycoreutils selinux-policy selinux-policy-targeted)
+      end
+      ```
 
-        **Uninstall**
-        ```ruby
-        selinux_install 'example' do
-          action :remove
-        end
-        ```
+      **Uninstall**
+      ```ruby
+      selinux_install 'example' do
+        action :remove
+      end
+      ```
       DOC
 
       property :packages, [String, Array],
-        default: lazy { default_install_packages },
-        description: "SELinux packages for system."
+                default: lazy { default_install_packages },
+                description: "SELinux packages for system."
 
       action_class do
         def do_package_action(action)

data/lib/chef/resource/selinux_login.rb

@@ -19,30 +19,31 @@ class Chef
     class SelinuxLogin < Chef::Resource
       unified_mode true
 
-      provides :selinux_login
+      provides :selinux_login, target_mode: true
+      target_mode support: :full
 
       description "Use the **selinux_login** resource to add, update, or remove SELinux user to OS login mappings."
       introduced "18.1"
       examples <<~DOC
-        **Manage test OS user mapping with a range of s0 and associated SELinux user test_u**:
+      **Manage test OS user mapping with a range of s0 and associated SELinux user test_u**:
 
-        ```ruby
-        selinux_login 'test' do
-          user 'test_u'
-          range 's0'
-        end
-        ```
+      ```ruby
+      selinux_login 'test' do
+        user 'test_u'
+        range 's0'
+      end
+      ```
       DOC
 
       property :login, String,
-        name_property: true,
-        description: "An optional property to set the OS user login value if it differs from the resource block's name."
+                name_property: true,
+                description: "An optional property to set the OS user login value if it differs from the resource block's name."
 
       property :user, String,
-        description: "SELinux user to be mapped."
+                description: "SELinux user to be mapped."
 
       property :range, String,
-        description: "MLS/MCS security range for the SELinux user."
+                description: "MLS/MCS security range for the SELinux user."
 
       load_current_value do |new_resource|
         logins = shell_out!("semanage login -l").stdout.split("\n")

data/lib/chef/resource/selinux_module.rb

@@ -18,38 +18,39 @@ class Chef
     class SelinuxModule < Chef::Resource
       unified_mode true
 
-      provides :selinux_module
+      provides :selinux_module, target_mode: true
+      target_mode support: :full
 
       description "Use **selinux_module** module resource to create an SELinux policy module from a cookbook file or content provided as a string."
       introduced "18.0"
       examples <<~DOC
-        **Creating SElinux module from .te file located at `files` directory of your cookbook.**:
+      **Creating SElinux module from .te file located at `files` directory of your cookbook.**:
 
-        ```ruby
-        selinux_module 'my_policy_module' do
-          source 'my_policy_module.te'
-          action :create
-        end
-        ```
+      ```ruby
+      selinux_module 'my_policy_module' do
+        source 'my_policy_module.te'
+        action :create
+      end
+      ```
       DOC
 
       property :module_name, String,
-        name_property: true,
-        description: "Override the module name."
+                name_property: true,
+                description: "Override the module name."
 
       property :source, String,
-        description: "Module source file name."
+                description: "Module source file name."
 
       property :content, String,
-        description: "Module source as String."
+                description: "Module source as String."
 
       property :cookbook, String,
-        description: "Cookbook to source from module source file from(if it is not located in the current cookbook). The default value is the current cookbook.",
-        desired_state: false
+                description: "Cookbook to source from module source file from(if it is not located in the current cookbook). The default value is the current cookbook.",
+                desired_state: false
 
       property :base_dir, String,
-        default: "/etc/selinux/local",
-        description: "Directory to create module source file in."
+                default: "/etc/selinux/local",
+                description: "Directory to create module source file in."
 
       action_class do
         def selinux_module_filepath(type)
@@ -103,7 +104,7 @@ class Chef
           notifies :run, "execute[Install SELinux module '#{selinux_module_filepath("pp")}']", :immediately
         end
 
-        raise "Compilation must have failed, no 'pp' file found at: '#{selinux_module_filepath("pp")}'" unless ::File.exist?(selinux_module_filepath("pp"))
+        raise "Compilation must have failed, no 'pp' file found at: '#{selinux_module_filepath("pp")}'" unless ::TargetIO::File.exist?(selinux_module_filepath("pp"))
 
         execute "Install SELinux module '#{selinux_module_filepath("pp")}'" do
           command "semodule --install '#{selinux_module_filepath("pp")}'"
@@ -113,7 +114,7 @@ class Chef
 
       action :delete, description: "Remove module source files from `/etc/selinux/local`." do
         %w{fc if pp te}.each do |type|
-          next unless ::File.exist?(selinux_module_filepath(type))
+          next unless ::TargetIO::File.exist?(selinux_module_filepath(type))
 
           file selinux_module_filepath(type) do
             action :delete
@@ -122,7 +123,7 @@ class Chef
       end
 
       action :install, description: "Install a compiled module into the system." do
-        raise "Module must be compiled before it can be installed, no 'pp' file found at: '#{selinux_module_filepath("pp")}'" unless ::File.exist?(selinux_module_filepath("pp"))
+        raise "Module must be compiled before it can be installed, no 'pp' file found at: '#{selinux_module_filepath("pp")}'" unless ::TargetIO::File.exist?(selinux_module_filepath("pp"))
 
         unless list_installed_modules.include? new_resource.module_name
           converge_by "Install SELinux module #{selinux_module_filepath("pp")}" do

data/lib/chef/resource/selinux_permissive.rb

@@ -18,23 +18,24 @@ class Chef
     class SelinuxPermissive < Chef::Resource
       unified_mode true
 
-      provides :selinux_permissive
+      provides :selinux_permissive, target_mode: true
+      target_mode support: :full
 
       description "Use the **selinux_permissive** resource to allow some domains to misbehave without stopping them. This is not as good as setting specific policies, but better than disabling SELinux entirely."
       introduced "18.0"
       examples <<~DOC
-        **Disable enforcement on Apache**:
+      **Disable enforcement on Apache**:
 
-        ```ruby
-        selinux_permissive 'httpd_t' do
-          notifies :restart, 'service[httpd]'
-        end
-        ```
+      ```ruby
+      selinux_permissive 'httpd_t' do
+        notifies :restart, 'service[httpd]'
+      end
+      ```
       DOC
 
       property :context, String,
-        name_property: true,
-        description: "The SELinux context to permit."
+                name_property: true,
+                description: "The SELinux context to permit."
 
       action_class do
         def current_permissives

data/lib/chef/resource/selinux_port.rb

@@ -19,34 +19,35 @@ class Chef
     class SelinuxPort < Chef::Resource
       unified_mode true
 
-      provides :selinux_port
+      provides :selinux_port, target_mode: true
+      target_mode support: :full
 
       description "Use the **selinux_port** resource to assign a network port to a specific SELinux context. For example, running a web server on a non-standard port."
       introduced "18.0"
       examples <<~DOC
-        **Allow nginx/apache to bind to port 5678 by giving it the http_port_t context**:
+      **Allow nginx/apache to bind to port 5678 by giving it the http_port_t context**:
 
-        ```ruby
-        selinux_port '5678' do
-         protocol 'tcp'
-         secontext 'http_port_t'
-        end
-        ```
+      ```ruby
+      selinux_port '5678' do
+       protocol 'tcp'
+       secontext 'http_port_t'
+      end
+      ```
       DOC
 
       property :port, [Integer, String],
-        name_property: true,
-        regex: /^\d+$/,
-        description: "Port to modify."
+                name_property: true,
+                regex: /^\d+$/,
+                description: "Port to modify."
 
       property :protocol, String,
-        equal_to: %w{tcp udp},
-        required: %i{manage add modify},
-        description: "Protocol to modify."
+                equal_to: %w{tcp udp},
+                required: %i{manage add modify},
+                description: "Protocol to modify."
 
       property :secontext, String,
-        required: %i{manage add modify},
-        description: "SELinux context to assign to the port."
+                required: %i{manage add modify},
+                description: "SELinux context to assign to the port."
 
       action_class do
         include Chef::SELinux::CommonHelpers