cloud-mu 1.9.0.pre.beta

data/cookbooks/mu-mongo/recipes/default.rb

@@ -0,0 +1,149 @@
+#
+# Cookbook Name:: mu-mongo
+# Recipe:: default
+#
+# Copyright 2015, eGlobalTech
+#
+# All rights reserved - Do Not Redistribute
+#
+
+::Chef::Recipe.send(:include, Chef::Mixin::ShellOut)
+
+include_recipe "mongodb::install"
+include_recipe 'chef-vault'
+node.normal['mongodb']['config']['replSet'] = "mu"
+node.save
+
+
+node['application_attributes']['mongo_dirs'].each { |path|
+  directory path['dir'] do
+    owner "mongod"
+    group "mongod"
+  end
+  execute "mkfs -t ext4 #{path['dev']}" do
+    not_if "tune2fs -l #{path['dev']}"
+  end
+  mount path['dir'] do
+    device path['dev']
+    action [:mount, :enable]
+    notifies :restart, "service[#{node['mongodb']['default_init_name']}]", :delayed
+  end
+}
+execute "fix /tmp permissions" do
+  command "chmod 1777 /tmp ; /sbin/restorecon -R /tmp"
+  notifies :restart, "service[mongod]", :delayed
+end
+
+[27017, 27018].each { |port|
+  bash "Allow TCP #{port} through iptables" do
+    user "root"
+    not_if "/sbin/iptables -nL | egrep '^ACCEPT.*dpt:#{port}($| )'"
+    code <<-EOH
+      iptables -I INPUT -p tcp --dport #{port} -j ACCEPT
+      service iptables save
+    EOH
+  end
+}
+
+cookbook_file "/mongo_data/keyfile" do
+  source "keyfile"
+  mode 0400
+  owner "mongod"
+  group "mongod"
+  notifies :restart, "service[mongod]", :delayed
+end
+
+template "/etc/logrotate.d/mongodb" do
+  source "mongo_logrotate.erb"
+  owner "root"
+  group "root"
+  mode 0644
+  notifies :restart, "service[mongod]", :delayed
+end
+
+include_recipe "mongodb::replicaset"
+
+mongo_admin_auth_info = chef_vault_item("mongodb", "admin")
+$mongo_admin_usr = mongo_admin_auth_info['username']
+$mongo_admin_pwd = mongo_admin_auth_info['password']
+
+mongo_mu_auth_info = chef_vault_item("mongodb", "mu")
+$mongo_mu_usr = mongo_mu_auth_info['username']
+$mongo_mu_pwd = mongo_mu_auth_info['password']
+
+# Figure out whether we're the first node to the party (CAP will enforce this
+# being atomic). If so, we'll be managing the cluster memberships.
+found_master = false
+i_am_master = false
+node['deployment']['servers']['mongo'].each_pair { |name, data|
+  if data['mongo_master']
+    found_master = true
+    if name == Chef::Config[:node_name]
+      i_am_master = true
+    end
+  end
+}
+if !found_master
+  node.normal['deployment']['servers']['mongo'][Chef::Config['node_name']]['mongo_master'] = true
+  node.save
+  i_am_master = true
+end
+
+if i_am_master
+
+  template "/root/replset_init.js" do
+    source "replset_init.js.erb"
+    mode 0400
+    sensitive true
+  end
+
+  cmd = shell_out("mongo admin --quiet --eval 'rs.conf()'")
+  if cmd.stdout.chop == 'null'
+    execute "/usr/bin/mongo admin /root/replset_init.js" do
+      notifies :restart, "service[mongod]", :delayed
+    end
+  end
+
+  template "/root/mongo_init.js" do
+    source "mongo_init.js.erb"
+    mode 0400
+    sensitive true
+  end
+  execute "/usr/bin/mongo admin /root/mongo_init.js" do
+    not_if "mongo admin --quiet -u #{$mongo_admin_usr} -p #{$mongo_admin_pwd} --eval \"db.system.users.find({user: '#{$mongo_admin_usr}'}).count()\""
+    retries 4
+    retry_delay 15
+    sensitive true
+  end
+
+  bash "mongo Create DB #{node['mongodb']['mu_db_name']}" do
+    code <<-EOH
+			mongo admin -u #{$mongo_admin_usr} -p #{$mongo_admin_pwd} <<-EOF
+			use #{node['mongodb']['mu_db_name']}
+			db.createUser({user: "#{$mongo_mu_usr}", pwd: "#{$mongo_mu_pwd}", roles: ['readWrite']})
+			exit
+			EOF
+    EOH
+    sensitive true
+  end
+
+  template "/root/mongo_replset_addnodes.js" do
+    source "mongo_replset_addnodes.js.erb"
+    mode 0400
+    #notifies :restart, "service[mongod]", :immediately
+  end
+  bash "Adding nodes to ReplicaSet" do
+    code "/usr/bin/mongo admin -u #{$mongo_admin_usr} -p #{$mongo_admin_pwd} /root/mongo_replset_addnodes.js"
+    sensitive true
+  end
+
+  cookbook_file "/root/remove_nodes.js" do
+    source "remove_nodes.js"
+    mode 0400
+  end
+  bash "Removing nodes from ReplicatSet" do
+    code "/usr/bin/mongo admin -u #{$mongo_admin_usr} -p #{$mongo_admin_pwd} /root/remove_nodes.js"
+    sensitive true
+  end
+
+end

data/cookbooks/mu-mongo/recipes/yum-update-rule.rb

@@ -0,0 +1,18 @@
+#
+# Cookbook Name:: mu-mongo
+# Recipe:: yum-update-rule
+#
+# Copyright 2015, eGlobalTech
+#
+# All rights reserved - Do Not Redistribute
+#
+
+case node['platform']
+  when "centos"
+    execute "tell yum not to touch MongoDB" do
+      command "echo 'exclude=mongo*' >> /etc/yum.conf"
+      not_if "grep ^exclude=mongo /etc/yum.conf"
+    end
+  else
+    Chef::Log.info("Unsupported platform #{node['platform']}")
+end

data/cookbooks/mu-mongo/templates/default/mongo_create_openfema_db.js.erb

@@ -0,0 +1,2 @@
+db.auth({user: "<%= $mongo_admin_usr %>", pwd: "<%= $mongo_admin_pwd %>"})
+db.createUser({user: "<%= $mongo_openfema_usr %>", pwd: "<%= $mongo_openfema_pwd %>", roles : ['readWrite']})

data/cookbooks/mu-mongo/templates/default/mongo_init.js.erb

@@ -0,0 +1 @@
+db.createUser({user: "<%= $mongo_admin_usr %>", pwd: "<%= $mongo_admin_pwd %>", roles: [{role:"root",db:"admin"}]})

data/cookbooks/mu-mongo/templates/default/mongo_logrotate.erb

@@ -0,0 +1,14 @@
+<%= node['mongodb']['log_dir'] %>/*.log {
+        daily
+        rotate 365
+        compress
+        dateext
+        missingok
+        notifempty
+        sharedscripts
+        copytruncate
+        postrotate
+                killall -SIGUSR1 mongod
+                find <%= node['mongodb']['log_dir'] %> -type f -regex ".*\.\(log.[0-9].*-[0-9].*\)" -exec rm {} \;
+endscript
+}

data/cookbooks/mu-mongo/templates/default/mongo_replset_addnodes.js.erb

@@ -0,0 +1,6 @@
+rs.initiate()
+<% node['deployment']['servers']['mongo'].each_pair { |nodename, data|
+	if !data['mongo_master'] %>
+rs.add("<%= nodename %>:27017")
+<%	end
+} %>

data/cookbooks/mu-mongo/templates/default/replset_init.js.erb

@@ -0,0 +1,2 @@
+rs.initiate()
+sleep(60000)

data/cookbooks/mu-openvpn/CHANGELOG.md

@@ -0,0 +1,13 @@
+mu-openvpn CHANGELOG
+====================
+
+This file is used to list changes made in each version of the mu-openvpn cookbook.
+
+0.1.0
+-----
+- [your_name] - Initial release of mu-openvpn
+
+- - -
+Check the [Markdown Syntax Guide](http://daringfireball.net/projects/markdown/syntax) for help with Markdown.
+
+The [Github Flavored Markdown page](http://github.github.com/github-flavored-markdown/) describes the differences between markdown on github and standard markdown.

data/cookbooks/mu-openvpn/LICENSE

@@ -0,0 +1,37 @@
+Through accessing, reading, or utilizing this software in any manner whatsoever
+or through any means whatsoever, whether the access, reading or use is either
+solely looking at this software or this software has been integrated into any
+derivative work, the party accessing,  reading, or utilizing the software
+directly or indirectly agrees to abide by the following license. 
+
+The eGlobalTech Cloud Automation Platform is the Copyright (c) 2014 of Global
+Tech Inc. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+this list of conditions and the following disclaimer in the documentation
+and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its contributors
+may be used to endorse or promote products derived from this software without
+specific prior written permission.
+
+Global Tech, Inc. is the co-owner of any derivative works created with this
+software. 
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+

data/cookbooks/mu-openvpn/README.md

@@ -0,0 +1,6 @@
+mu-openvpn Cookbook
+===================
+
+Mu OpenVPN Cookbook
+
+TODO: Improve Readme.md

data/cookbooks/mu-openvpn/attributes/default.rb

@@ -0,0 +1,119 @@
+default['openvpn']['version'] = "2.1.4"
+case node['platform_family']
+  when "rhel"
+    default['openvpn']['package'] = "openvpn-as-#{node['openvpn']['version']}-CentOS#{node['platform_version'].to_i}.x86_64.rpm"
+end
+
+default['openvpn']['vpc_networks'] = %w{172.31.0.0/16 10.0.0.0/16}
+default['openvpn']['base_url'] = "http://swupdate.openvpn.org/as"
+default['openvpn']['url'] = node['ec2']['public_ip_address']
+default['openvpn']['base_dir'] = "/usr/local/openvpn_as"
+default['openvpn']['scripts'] = "#{node['openvpn']['base_dir']}/scripts"
+default['openvpn']['bin'] = "#{node['openvpn']['base_dir']}/bin"
+default['openvpn']['cert_dir'] = "#{node['openvpn']['base_dir']}/etc/web-ssl"
+default['openvpn']['use_ca_signed_cert'] = false
+default['openvpn']['configure_ldap_auth'] = false
+default['openvpn']['ldap_bind_dn'] = "OU=org, DC=example, DC=net"
+default['openvpn']['ldap_display_name'] = "My LDAP servers"
+default['openvpn']['ldap_server1'] = "ldapsvr1"
+default['openvpn']['ldap_server2'] = "ldapsvr2"
+default['openvpn']['ldap_username_attr'] = "sAMAccountName"
+default['openvpn']['ldap_users_base_dn'] = "CN=Users, DC=example, DC=net"
+default['openvpn']['ldap_ssl_verify'] = "never"
+# ldap_ssl_verify can be set to: demand, allow or never
+default['openvpn']['ldap_use_ssl'] = "never"
+# ldap_use_ssl can be set to: always, adaptive or never
+default['openvpn']['auth_type'] = "pam"
+default['openvpn']['tls_version_server'] = 1.0
+default['openvpn']['tls_version_client'] = 1.2
+default['openvpn']['ssl_lib'] = "openssl"
+default['openvpn']['https_port'] = 943
+default['openvpn']['daemon_tcp_port'] = 443
+default['openvpn']['daemon_udp_port'] = 1194
+default['openvpn']['internal_network_ip'] = "172.27.224.0"
+default['openvpn']['internal_network_netmask'] = 20
+default['openvpn']['routing_method'] = "nat"
+default['openvpn']['reroute_all_traffic'] = false
+default['openvpn']['ssl_ciphersuites'] = "DEFAULT:!EXP:!PSK:!SRP:!MEDIUM:!LOW:!RC4:!3DES"
+default['openvpn']['multiple_user_sessions'] = false
+
+default['openvpn']['fw_rules'] = [
+    {:port => 443, :protocol => "tcp"},
+    {:port => 1194, :protocol => "udp"}
+]
+default['openvpn']['cert_names'] = [
+    {:openvpn_name => "server.crt", :vault_item => "cert"},
+    {:openvpn_name => "server.key", :vault_item => "key"},
+    {:openvpn_name => "ca.crt", :vault_item => "bundle"}
+]
+default['openvpn']['config'] = {
+    # bah!
+    "cs.tls_version_min" => node['openvpn']['tls_version_client'],
+    "cs.ssl_reneg" => false,
+    "sa.ssl_lib" => node['openvpn']['ssl_lib'],
+    "host.name" => node['openvpn']['url'],
+    "vpn.client.routing.inter_client" => false,
+    "vpn.client.routing.reroute_dns" => true,
+    "vpn.client.routing.reroute_gw" => node['openvpn']['reroute_all_traffic'],
+    "vpn.server.routing.gateway_access" => true,
+    "vpn.client.config_text" => "'-remote \nremote-random'",
+    "vpn.server.tls_version_min" => node['openvpn']['tls_version_server'],
+    "admin_ui.https.ip_address" => "eth0",
+    "admin_ui.https.port" => node['openvpn']['https_port'],
+    "auth.ldap.0.name" => "'#{node['openvpn']['ldap_display_name']}'",
+    "auth.ldap.0.ssl_verify" => node['openvpn']['ldap_ssl_verify'],
+    "auth.ldap.0.timeout" => 4,
+    "auth.ldap.0.use_ssl" => node['openvpn']['ldap_use_ssl'],
+    "auth.ldap.0.bind_dn" => "'#{node['openvpn']['ldap_bind_dn']}'",
+    "auth.ldap.0.server.0.host" => node['openvpn']['ldap_server1'],
+    "auth.ldap.0.server.1.host" => node['openvpn']['ldap_server2'],
+    # "auth.ldap.0.ssl_ca_cert" => node['openvpn'][:ldap_ssl_ca_cert],
+    "auth.ldap.0.uname_attr" => node['openvpn']['ldap_username_attr'],
+    "auth.ldap.0.users_base_dn" => "'#{node['openvpn']['ldap_users_base_dn']}'",
+    "auth.module.type" => node['openvpn']['auth_type'],
+    "auth.pam.0.service" => "openvpnas",
+    "auth.radius.0.acct_enable" => "false",
+    "auth.radius.0.name" => "'#{node['openvpn']['ldap_display_name']}'",
+    "cs.cws_proto_v2" => true,
+    "cs.https.ip_address" => "eth0",
+    "cs.https.port" => node['openvpn']['https_port'],
+    "cs.prof_sign_web" => true,
+    "cs.ssl_method" => "SSLv3",
+    "cs.openssl_ciphersuites" => node['openvpn']['ssl_ciphersuites'],
+    "sa.initial_run_groups.0" => "web_group",
+    "sa.initial_run_groups.1" => "openvpn_group",
+    "vpn.daemon.0.client.netmask_bits" => node['openvpn']['internal_network_netmask'],
+    "vpn.daemon.0.client.network" => node['openvpn']['internal_network_ip'],
+    "vpn.daemon.0.listen.ip_address" => "eth0",
+    "vpn.daemon.0.listen.port" => node['openvpn']['daemon_tcp_port'],
+    "vpn.daemon.0.listen.protocol" => "tcp",
+    "vpn.general.osi_layer" => "3",
+    "vpn.daemon.0.server.ip_address" => "eth0",
+    "vpn.server.duplicate_cn" => node['openvpn']['multiple_user_sessions'],
+    "vpn.server.daemon.enable" => true,
+    "vpn.server.daemon.tcp.n_daemons" => 2,
+    "vpn.server.daemon.tcp.port" => node['openvpn']['daemon_tcp_port'],
+    "vpn.server.daemon.udp.n_daemons" => 2,
+    "vpn.server.daemon.udp.port" => node['openvpn']['daemon_udp_port'],
+    "vpn.server.group_pool.0" => "172.27.240.0/20",
+    "vpn.server.port_share.enable" => true,
+    "vpn.server.port_share.ip_address" => "1.2.3.4",
+    "vpn.server.port_share.port" => 1234,
+    "vpn.server.port_share.service" => "admin+client",
+    "vpn.server.routing.private_access" => node['openvpn']['routing_method'],
+    "vpn.tls_refresh.do_reauth" => true,
+    "vpn.tls_refresh.interval" => 360
+}
+default['openvpn']['users'] = [
+    {:name => "openvpn", :type => "admin", :auth => "os"}
+# ,{ :name => "user_name", :type => "user" }
+]
+default['openvpn']['users_vault'] = {
+    :vault => "openvpn", :item => "users"
+}
+default['openvpn']['cert_vault'] = {
+    :vault => "certs", :item => "star_muplatform"
+}
+default['openvpn']['ldap_vault'] = {
+    :vault => "openvpn", :item => "ldap", :field => "bind_password"
+}

data/cookbooks/mu-openvpn/metadata.rb

@@ -0,0 +1,18 @@
+name 'mu-openvpn'
+maintainer 'eGlobalTech, Inc'
+maintainer_email 'mu-developers@googlegroups.com'
+license 'BSD-3-Clause'
+description 'Installs/Configures mu-openvpn'
+long_description IO.read(File.join(File.dirname(__FILE__), 'README.md'))
+source_url 'https://github.com/cloudamatic/mu'
+issues_url 'https://github.com/cloudamatic/mu/issues'
+chef_version '>= 12.1' if respond_to?(:chef_version)
+version '0.1.0'
+
+%w( centos redhat ).each do |os|
+	supports os
+end
+
+depends 'chef-vault', '~> 3.1.1'
+depends 'mu-utility'
+depends 'mu-firewall'

data/cookbooks/mu-openvpn/recipes/default.rb

@@ -0,0 +1,108 @@
+#
+# Cookbook Name:: mu-openvpn
+# Recipe:: default
+#
+# Copyright 2015, eGlobalTech, Inc
+#
+# All rights reserved - Do Not Redistribute
+#
+
+include_recipe 'chef-vault'
+
+users_vault = chef_vault_item(node['openvpn']['users_vault']['vault'], node['openvpn']['users_vault']['item'])
+
+case node['platform']
+  when platform_family?('rhel')
+    include_recipe 'mu-firewall'
+
+    node['openvpn']['fw_rules'].each { |rule|
+      firewall_rule "Allow openvpn #{rule[:port]}" do
+        port rule[:port]
+        protocol rule[:protocol].to_sym
+      end
+    }
+
+    remote_file "#{Chef::Config[:file_cache_path]}/#{node['openvpn']['package']}" do
+      source "#{node['openvpn']['base_url']}/#{node['openvpn']['package']}"
+    end
+
+    group "openvpn"
+
+    node['openvpn']['users'].each { |user|
+      if user[:auth] == "os"
+        user user[:name] do
+          gid "openvpn"
+          home "/home/#{user[:name]}"
+          shell "/sbin/nologin"
+          password users_vault["#{user[:name]}_password_hash"]
+        end
+      end
+    }
+
+    package "openvpn-as" do
+      source "#{Chef::Config[:file_cache_path]}/#{node['openvpn']['package']}"
+    end
+
+    service 'openvpnas' do
+      action :nothing
+    end
+
+    if node['openvpn']['use_ca_signed_cert']
+      certs_vault = chef_vault_item(node['openvpn']['cert_vault']['vault'], node['openvpn']['cert_vault']['item'])
+
+      node['openvpn']['cert_names'].each { |type|
+        vault_item = type[:vault_item]
+        file "#{node['openvpn']['cert_dir']}/#{type[:openvpn_name]}" do
+          mode 0400
+          content certs_vault[vault_item].strip
+          sensitive true
+          owner "openvpn"
+          group "openvpn"
+          notifies :restart, "service[openvpnas]"
+        end
+      }
+    end
+
+    if node['openvpn']['configure_ldap_auth']
+      ldap_vault = chef_vault_item(node['openvpn']['ldap_vault']['vault'], node['openvpn']['ldap_vault']['item'])
+      execute "Setting LDAP bind password" do
+        command "./sacli -k auth.ldap.0.bind_pw -v #{ldap_vault[node['openvpn']['ldap_vault']['field']]} ConfigPut"
+        cwd node['openvpn']['scripts']
+        not_if "#{node['openvpn']['scripts']}/sacli ConfigQuery | grep auth.ldap.0.bind_pw | grep #{ldap_vault[node['openvpn']['ldap_vault']['field']]}"
+        notifies :restart, "service[openvpnas]"
+        sensitive true
+      end
+    end
+
+    node['openvpn']['vpc_networks'].each.with_index { |cidr, i|
+      execute "./sacli -k vpn.server.routing.private_network.#{i} -v #{cidr} ConfigPut" do
+        cwd node['openvpn']['scripts']
+        not_if "#{node['openvpn']['scripts']}/sacli ConfigQuery | grep vpn.server.routing.private_network.#{i} | grep #{cidr}"
+        notifies :restart, "service[openvpnas]"
+      end
+    }
+
+    node['openvpn']['config'].each { |key, value|
+      execute "./sacli -k #{key} -v #{value} ConfigPut" do
+        cwd node['openvpn']['scripts']
+        not_if "#{node['openvpn']['scripts']}/sacli ConfigQuery | grep #{key} | grep #{value}"
+        notifies :restart, "service[openvpnas]"
+      end
+    }
+
+    template "#{Chef::Config[:file_cache_path]}/openvpn_users.json" do
+      source "users.json.erb"
+      variables(
+          :users => node['openvpn']['users']
+      )
+    end
+
+    execute "./confdba -ulf #{Chef::Config[:file_cache_path]}/openvpn_users.json" do
+      # Change user configuration to create json instead of just using this statically
+      # This doesn't create the user accounts, just allows pre existing LDAP/PAM user accounts access to OpenVPN. We limit access to allowed users only.
+      # need to add a guard
+      cwd node['openvpn']['scripts']
+    end
+  else
+    Chef::Log.info("Unsupported platform #{node['platform']}")
+end

data/cookbooks/mu-openvpn/templates/default/users.json.erb

@@ -0,0 +1,42 @@
+{
+    "__DEFAULT__": {
+        "conn_group": "users",
+        "def_deny": "true",
+        "prop_autogenerate": "true",
+        "type": "user_default"
+    },
+<% 
+@users.each { |user|
+%>
+    "<%= user[:name] %>": {
+       <% if user[:type] == "user" %>
+        "conn_group": "users",
+        "type": "user_connect"
+       <% elsif user[:type] == "admin" %>
+        "conn_group": "admins",
+        "prop_superuser": "true",
+        "type": "user_compile"
+       <% end %>
+    },
+<% 
+}
+%>
+    "admins": {
+        "c2s_dest_s": "false",
+        "c2s_dest_v": "false",
+        "group_declare": "true",
+        "prop_autologin": "false",
+        "prop_deny": "false",
+        "prop_superuser": "true",
+        "type": "group"
+    },
+    "users": {
+        "c2s_dest_s": "false",
+        "c2s_dest_v": "false",
+        "group_declare": "true",
+        "prop_autologin": "true",
+        "prop_deny": "false",
+        "prop_superuser": "false",
+        "type": "group"
+    }
+}

data/cookbooks/mu-php54/CHANGELOG.md

@@ -0,0 +1,12 @@
+# CHANGELOG for php
+
+This file is used to list changes made in each version of php.
+
+## 0.1.0:
+
+* Initial release of php5-apache
+
+- - -
+Check the [Markdown Syntax Guide](http://daringfireball.net/projects/markdown/syntax) for help with Markdown.
+
+The [Github Flavored Markdown page](http://github.github.com/github-flavored-markdown/) describes the differences between markdown on github and standard markdown.

data/cookbooks/mu-php54/LICENSE

@@ -0,0 +1,37 @@
+Through accessing, reading, or utilizing this software in any manner whatsoever
+or through any means whatsoever, whether the access, reading or use is either
+solely looking at this software or this software has been integrated into any
+derivative work, the party accessing,  reading, or utilizing the software
+directly or indirectly agrees to abide by the following license. 
+
+The eGlobalTech Cloud Automation Platform is the Copyright (c) 2014 of Global
+Tech Inc. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+this list of conditions and the following disclaimer in the documentation
+and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its contributors
+may be used to endorse or promote products derived from this software without
+specific prior written permission.
+
+Global Tech, Inc. is the co-owner of any derivative works created with this
+software. 
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+