ciborg 0.0.1 → 3.0.0

data/chef/travis-cookbooks/ci_environment/nodejs/files/default/profile_entry.sh

@@ -0,0 +1,3 @@
+export NVM_DIR=/home/vagrant/.nvm
+export PATH="./node_modules/.bin":$PATH
+. /home/vagrant/.nvm/nvm.sh

data/chef/travis-cookbooks/ci_environment/nodejs/recipes/multi.rb

@@ -0,0 +1,79 @@
+#
+# Cookbook Name:: node.js
+# Recipe:: multi
+# Copyright 2011-2013, Travis CI Development Team <contact@travis-ci.org>
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy
+# of this software and associated documentation files (the "Software"), to deal
+# in the Software without restriction, including without limitation the rights
+# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+# copies of the Software, and to permit persons to whom the Software is
+# furnished to do so, subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in
+# all copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+# THE SOFTWARE.
+
+include_recipe "build-essential"
+include_recipe "networking_basic"
+
+require "tmpdir"
+
+permissions_setup = Proc.new do |resource|
+  resource.owner node.travis_build_environment.user
+  resource.group node.travis_build_environment.group
+  resource.mode 0755
+end
+
+directory "#{node.travis_build_environment.home}/.nvm" do
+  permissions_setup.call(self)
+end
+
+# Note that nvm will automatically install npm, the node package manager,
+# for each installed version of node.
+cookbook_file "#{node.travis_build_environment.home}/.nvm/nvm.sh" do
+  permissions_setup.call(self)
+end
+
+template "/etc/profile.d/nvm.sh" do
+  permissions_setup.call(self)
+  source "nvm.sh.erb"
+end
+
+nvm = "source #{node.travis_build_environment.home}/.nvm/nvm.sh; nvm"
+
+node[:nodejs][:versions].each do |version|
+  bash "installing node version #{version}" do
+    creates "#{node.travis_build_environment.home}/.nvm/#{version}"
+    user  node.travis_build_environment.user
+    group node.travis_build_environment.group
+    cwd   node.travis_build_environment.home
+    environment({'HOME' => "#{node.travis_build_environment.home}"})
+    code  "#{nvm} install v#{version}"
+  end
+end
+
+bash "make the default node" do
+  user node.travis_build_environment.user
+  code "#{nvm} alias default v#{node[:nodejs][:default]}"
+end
+
+node[:nodejs][:aliases].each do |existing_name, new_name|
+  bash "alias node #{existing_name} => #{new_name}" do
+    user node.travis_build_environment.user
+    cwd  node.travis_build_environment.home
+    code "#{nvm} alias #{new_name} v#{existing_name}"
+  end
+end
+
+bash "clean up build artifacts & sources" do
+  user node.travis_build_environment.user
+  code "rm -rf #{File.join(node.travis_build_environment.home, '.nvm', 'src')}"
+end

data/chef/travis-cookbooks/ci_environment/nodejs/templates/default/nvm.sh.erb

@@ -0,0 +1,3 @@
+export NVM_DIR=<%= node.travis_build_environment.home %>/.nvm
+export PATH="./node_modules/.bin":$PATH
+. $NVM_DIR/nvm.sh

data/chef/travis-cookbooks/ci_environment/openssh/files/default/ssh_init.sh

@@ -0,0 +1,181 @@
+#! /bin/sh
+
+### BEGIN INIT INFO
+# Provides:             sshd
+# Required-Start:       $remote_fs $syslog $network
+# Required-Stop:        $remote_fs $syslog
+# Default-Start:        2 3 4 5
+# Default-Stop:         
+# Short-Description:    OpenBSD Secure Shell server
+### END INIT INFO
+
+set -e
+
+# /etc/init.d/ssh: start and stop the OpenBSD "secure shell(tm)" daemon
+
+test -x /usr/sbin/sshd || exit 0
+( /usr/sbin/sshd -\? 2>&1 | grep -q OpenSSH ) 2>/dev/null || exit 0
+
+chrooted() {
+    # borrowed from udev's postinst
+    # and then borrowed from initramfs-tools's preinst
+    if [ "$(stat -c %d/%i /)" = "$(stat -Lc %d/%i /proc/1/root 2>/dev/null)" ]; then
+        # the devicenumber/inode pair of / is the same as that of
+        # /sbin/init's root, so we're *not* in a chroot and hence
+        # return false.
+        return 1
+    fi
+    return 0
+}
+
+# The init.d script is only for chroots
+if [ -e /etc/init/ssh.conf ] && ! chrooted; then
+    exec /lib/init/upstart-job ssh "$@"
+fi
+
+umask 022
+
+if test -f /etc/default/ssh; then
+    . /etc/default/ssh
+fi
+
+. /lib/lsb/init-functions
+
+if [ -n "$2" ]; then
+    SSHD_OPTS="$SSHD_OPTS $2"
+fi
+
+# Are we running from init?
+run_by_init() {
+    ([ "$previous" ] && [ "$runlevel" ]) || [ "$runlevel" = S ]
+}
+
+check_for_no_start() {
+    # forget it if we're trying to start, and /etc/ssh/sshd_not_to_be_run exists
+    if [ -e /etc/ssh/sshd_not_to_be_run ]; then 
+        if [ "$1" = log_end_msg ]; then
+            log_end_msg 0
+        fi
+        if ! run_by_init; then
+            log_action_msg "OpenBSD Secure Shell server not in use (/etc/ssh/sshd_not_to_be_run)"
+        fi
+        exit 0
+    fi
+}
+
+check_dev_null() {
+    if [ ! -c /dev/null ]; then
+        if [ "$1" = log_end_msg ]; then
+            log_end_msg 1 || true
+        fi
+        if ! run_by_init; then
+            log_action_msg "/dev/null is not a character device!"
+        fi
+        exit 1
+    fi
+}
+
+check_privsep_dir() {
+    # Create the PrivSep empty dir if necessary
+    if [ ! -d /var/run/sshd ]; then
+        mkdir /var/run/sshd
+        chmod 0755 /var/run/sshd
+    fi
+}
+
+check_config() {
+    if [ ! -e /etc/ssh/sshd_not_to_be_run ]; then
+        /usr/sbin/sshd $SSHD_OPTS -t || exit 1
+    fi
+}
+
+export PATH="${PATH:+$PATH:}/usr/sbin:/sbin"
+
+case "$1" in
+  start)
+        check_privsep_dir
+        check_for_no_start
+        check_dev_null
+        log_daemon_msg "Starting OpenBSD Secure Shell server" "sshd"
+        if start-stop-daemon --start --quiet --oknodo --pidfile /var/run/sshd.pid --exec /usr/sbin/sshd -- $SSHD_OPTS; then
+            log_end_msg 0
+        else
+            log_end_msg 1
+        fi
+        ;;
+  stop)
+        log_daemon_msg "Stopping OpenBSD Secure Shell server" "sshd"
+        if start-stop-daemon --stop --quiet --oknodo --pidfile /var/run/sshd.pid; then
+            log_end_msg 0
+        else
+            log_end_msg 1
+        fi
+        ;;
+
+  reload|force-reload)
+        check_for_no_start
+        check_config
+        log_daemon_msg "Reloading OpenBSD Secure Shell server's configuration" "sshd"
+        if start-stop-daemon --stop --signal 1 --quiet --oknodo --pidfile /var/run/sshd.pid --exec /usr/sbin/sshd; then
+            log_end_msg 0
+        else
+            log_end_msg 1
+        fi
+        ;;
+
+  restart)
+        check_privsep_dir
+        check_config
+        log_daemon_msg "Restarting OpenBSD Secure Shell server" "sshd"
+        start-stop-daemon --stop --quiet --oknodo --retry 30 --pidfile /var/run/sshd.pid
+        check_for_no_start log_end_msg
+        check_dev_null log_end_msg
+        if start-stop-daemon --start --quiet --oknodo --pidfile /var/run/sshd.pid --exec /usr/sbin/sshd -- $SSHD_OPTS; then
+            log_end_msg 0
+        else
+            log_end_msg 1
+        fi
+        ;;
+
+  try-restart)
+        check_privsep_dir
+        check_config
+        log_daemon_msg "Restarting OpenBSD Secure Shell server" "sshd"
+        set +e
+        start-stop-daemon --stop --quiet --retry 30 --pidfile /var/run/sshd.pid
+        RET="$?"
+        set -e
+        case $RET in
+            0)
+                # old daemon stopped
+                check_for_no_start log_end_msg
+                check_dev_null log_end_msg
+                if start-stop-daemon --start --quiet --oknodo --pidfile /var/run/sshd.pid --exec /usr/sbin/sshd -- $SSHD_OPTS; then
+                    log_end_msg 0
+                else
+                    log_end_msg 1
+                fi
+                ;;
+            1)
+                # daemon not running
+                log_progress_msg "(not running)"
+                log_end_msg 0
+                ;;
+            *)
+                # failed to stop
+                log_progress_msg "(failed to stop)"
+                log_end_msg 1
+                ;;
+        esac
+        ;;
+
+  status)
+        status_of_proc -p /var/run/sshd.pid /usr/sbin/sshd sshd && exit 0 || exit $?
+        ;;
+
+  *)
+        log_action_msg "Usage: /etc/init.d/ssh {start|stop|reload|force-reload|restart|try-restart|status}"
+        exit 1
+esac
+
+exit 0

data/chef/travis-cookbooks/ci_environment/openssh/files/default/sshd_config

@@ -0,0 +1,54 @@
+# See the sshd_config(5) manpage for details
+
+Port 22
+
+ListenAddress 0.0.0.0
+ListenAddress ::
+
+Protocol 2
+
+HostKey /etc/ssh/ssh_host_rsa_key
+HostKey /etc/ssh/ssh_host_dsa_key
+HostKey /etc/ssh/ssh_host_ecdsa_key
+
+UsePrivilegeSeparation yes
+
+KeyRegenerationInterval 3600
+ServerKeyBits 768
+
+SyslogFacility AUTH
+LogLevel DEBUG2
+
+LoginGraceTime 120
+PermitRootLogin yes
+StrictModes yes
+
+RSAAuthentication yes
+PubkeyAuthentication yes
+
+IgnoreRhosts yes
+RhostsRSAAuthentication no
+HostbasedAuthentication no
+
+PermitEmptyPasswords no
+
+ChallengeResponseAuthentication no
+
+X11Forwarding yes
+X11DisplayOffset 10
+PrintMotd no
+PrintLastLog yes
+TCPKeepAlive yes
+
+AcceptEnv LANG LC_*
+
+Subsystem sftp /usr/lib/openssh/sftp-server
+
+UsePAM yes
+
+
+# Effectively disables SSH timeouts
+ClientAliveInterval 30
+ClientAliveCountMax 99999
+
+MaxStartups 100

data/chef/travis-cookbooks/ci_environment/openssh/recipes/default.rb

@@ -0,0 +1,42 @@
+#
+# Cookbook Name:: openssh
+# Recipe:: default
+#
+# Copyright 2012-2013, Travis CI Development Team <contact@travis-ci.org>
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+package "openssh-server" do
+  action :install
+end
+
+service "ssh" do
+  action [:start, :enable]
+end
+
+cookbook_file "/etc/ssh/sshd_config" do
+  owner "root"
+  group "root"
+  mode 0644
+end
+
+# installs a fix that makes ssh wait for the network to
+# start up (see http://blog.roberthallam.org/2010/06/sshd-not-running-at-startup/). MK.
+cookbook_file "/etc/init.d/ssh" do
+  owner "root"
+  group "root"
+  mode  0755
+
+  source "ssh_init.sh"
+end

data/chef/travis-cookbooks/ci_environment/openssl/README.md

@@ -0,0 +1,37 @@
+Description
+====
+
+Provide a library method to generate secure random passwords in recipes.
+
+Requirements
+====
+
+Works on any platform with OpenSSL Ruby bindings installed, which are a requirement for Chef anyway.
+
+Usage
+====
+
+Most often this will be used to generate a secure password for an attribute.
+
+    include Opscode::OpenSSL::Password
+
+    set_unless[:my_password] = secure_password
+
+License and Author
+====
+
+Author:: Joshua Timberman (<joshua@opscode.com>)
+
+Copyright:: 2009-2011, Opscode, Inc
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

data/chef/travis-cookbooks/ci_environment/openssl/libraries/secure_password.rb

@@ -0,0 +1,37 @@
+#
+# Cookbook Name:: openssl
+# Library:: secure_password
+# Author:: Joshua Timberman <joshua@opscode.com>
+#
+# Copyright 2009, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require 'openssl'
+
+module Opscode
+  module OpenSSL
+    module Password
+      def secure_password
+        pw = String.new
+        
+        while pw.length < 20
+          pw << ::OpenSSL::Random.random_bytes(1).gsub(/\W/, '')
+        end
+
+        pw
+      end
+    end
+  end
+end

data/chef/travis-cookbooks/ci_environment/openssl/metadata.rb

@@ -0,0 +1,8 @@
+maintainer       "Opscode, Inc."
+maintainer_email "cookbooks@opscode.com"
+license          "Apache 2.0"
+description      "Provides a library with a method for generating secure random passwords."
+long_description IO.read(File.join(File.dirname(__FILE__), 'README.md'))
+version          "1.0.0"
+
+recipe "openssl", "Empty, this cookbook provides a library, see README.md"