cloud-mu 1.9.0.pre.beta

data/cookbooks/nagios/recipes/nginx.rb

@@ -0,0 +1,82 @@
+#
+# Author:: Tim Smith <tsmith@chef.io>
+# Cookbook Name:: nagios
+# Recipe:: nginx
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+if node['nagios']['server']['stop_apache']
+  service 'apache2' do
+    action :stop
+  end
+end
+
+# This doesn't use value_for_platform_family so that it can specify version ranges - COOK-2891
+if platform_family?('rhel') || platform_family?('fedora')
+  node.normal['nagios']['server']['nginx_dispatch'] = 'both'
+  if node['platform_version'].to_f < 6
+    node.normal['nginx']['install_method'] = 'source'
+  end
+end
+
+include_recipe 'chef_nginx'
+
+%w(default 000-default).each do |disable_site|
+  nginx_site disable_site do
+    enable false
+    notifies :reload, 'service[nginx]'
+  end
+end
+
+case dispatch_type = node['nagios']['server']['nginx_dispatch']
+when 'cgi'
+  node.normal['nginx_simplecgi']['cgi'] = true
+  include_recipe 'nginx_simplecgi::setup'
+when 'php'
+  node.normal['nginx_simplecgi']['php'] = true
+  include_recipe 'nginx_simplecgi::setup'
+when 'both'
+  node.normal['nginx_simplecgi']['php'] = true
+  node.normal['nginx_simplecgi']['cgi'] = true
+  include_recipe 'nginx_simplecgi::setup'
+else
+  Chef::Log.warn 'NAGIOS: NGINX setup does not have a dispatcher provided'
+end
+
+template File.join(node['nginx']['dir'], 'sites-available', 'nagios3.conf') do
+  source 'nginx.conf.erb'
+  mode '0644'
+  variables(
+    public_domain: node['public_domain'] || node['domain'],
+    listen_port: node['nagios']['http_port'],
+    https: node['nagios']['enable_ssl'],
+    ssl_cert_file: node['nagios']['ssl_cert_file'],
+    ssl_cert_key: node['nagios']['ssl_cert_key'],
+    docroot: node['nagios']['docroot'],
+    log_dir: node['nagios']['log_dir'],
+    fqdn: node['fqdn'],
+    nagios_url: node['nagios']['url'],
+    chef_env: node.chef_environment == '_default' ? 'default' : node.chef_environment,
+    htpasswd_file: File.join(node['nagios']['conf_dir'], 'htpasswd.users'),
+    cgi: %w(cgi both).include?(dispatch_type),
+    php: %w(php both).include?(dispatch_type)
+  )
+  if File.symlink?(File.join(node['nginx']['dir'], 'sites-enabled', 'nagios3.conf'))
+    notifies :reload, 'service[nginx]', :immediately
+  end
+end
+
+nginx_site 'nagios3.conf' do
+  notifies :reload, 'service[nginx]'
+end

data/cookbooks/nagios/recipes/pagerduty.rb

@@ -0,0 +1,143 @@
+#
+# Author:: Jake Vanderdray <jvanderdray@customink.com>
+# Author:: Tim Smith <tsmith@chef.io>
+# Cookbook Name:: nagios
+# Recipe:: pagerduty
+#
+# Copyright 2011, CustomInk LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# TODO: remove when backward compatibility is dropped.
+def using_old_pagerduty_key_attribute?
+  node['nagios']['pagerduty_key'] &&
+    node['nagios']['pagerduty_key'] != node['nagios']['pagerduty']['key']
+end
+
+if using_old_pagerduty_key_attribute?
+  Chef::Log.warn('The nagios.pagerduty_key attribute is deprecated. It is replaced by the nagios.pagerduty.key attribute.')
+  Chef::Log.warn('Assigning nagios.pagerduty.key from nagios.pagerduty_key now.')
+  node.normal['nagios']['pagerduty']['key'] = node['nagios']['pagerduty_key']
+end
+
+package 'perl-CGI' do
+  case node['platform_family']
+  when 'rhel', 'fedora'
+    package_name 'perl-CGI'
+  when 'debian'
+    package_name 'libcgi-pm-perl'
+  when 'arch'
+    package_name 'perl-cgi'
+  end
+  action :install
+end
+
+package 'perl-JSON' do
+  case node['platform_family']
+  when 'rhel', 'fedora'
+    package_name 'perl-JSON'
+  when 'debian'
+    package_name 'libjson-perl'
+  when 'arch'
+    package_name 'perl-json'
+  end
+  action :install
+end
+
+package 'libwww-perl' do
+  case node['platform_family']
+  when 'rhel', 'fedora'
+    package_name 'perl-libwww-perl'
+  when 'debian'
+    package_name 'libwww-perl'
+  when 'arch'
+    package_name 'libwww-perl'
+  end
+  action :install
+end
+
+package 'libcrypt-ssleay-perl' do
+  case node['platform_family']
+  when 'rhel', 'fedora'
+    package_name 'perl-Crypt-SSLeay'
+  when 'debian'
+    package_name 'libcrypt-ssleay-perl'
+  when 'arch'
+    package_name 'libcrypt-ssleay-perl'
+  end
+  action :install
+end
+
+remote_file "#{node['nagios']['plugin_dir']}/notify_pagerduty.pl" do
+  owner 'root'
+  group 'root'
+  mode '0755'
+  source node['nagios']['pagerduty']['script_url']
+  action :create_if_missing
+end
+
+template "#{node['nagios']['cgi-bin']}/pagerduty.cgi" do
+  source 'pagerduty.cgi.erb'
+  owner node['nagios']['user']
+  group node['nagios']['group']
+  mode '0755'
+  variables(
+    command_file: node['nagios']['conf']['command_file']
+  )
+end
+
+nagios_bags = NagiosDataBags.new
+pagerduty_contacts = nagios_bags.get('nagios_pagerduty')
+
+nagios_command 'notify-service-by-pagerduty' do
+  options 'command_line' => ::File.join(node['nagios']['plugin_dir'], 'notify_pagerduty.pl') + ' enqueue -f pd_nagios_object=service -f pd_description="$HOSTNAME$ : $SERVICEDESC$"'
+end
+
+nagios_command 'notify-host-by-pagerduty' do
+  options 'command_line' => ::File.join(node['nagios']['plugin_dir'], 'notify_pagerduty.pl') + ' enqueue -f pd_nagios_object=host -f pd_description="$HOSTNAME$ : $SERVICEDESC$"'
+end
+
+unless node['nagios']['pagerduty']['key'].nil? || node['nagios']['pagerduty']['key'].empty?
+  nagios_contact 'pagerduty' do
+    options 'alias'                         => 'PagerDuty Pseudo-Contact',
+            'service_notification_period'   => '24x7',
+            'host_notification_period'      => '24x7',
+            'service_notification_options'  => node['nagios']['pagerduty']['service_notification_options'],
+            'host_notification_options'     => node['nagios']['pagerduty']['host_notification_options'],
+            'service_notification_commands' => 'notify-service-by-pagerduty',
+            'host_notification_commands'    => 'notify-host-by-pagerduty',
+            'pager'                         => node['nagios']['pagerduty']['key']
+  end
+end
+
+pagerduty_contacts.each do |contact|
+  name = contact['contact'] || contact['id']
+
+  nagios_contact name do
+    options 'alias'                         => "PagerDuty Pseudo-Contact #{name}",
+            'service_notification_period'   => contact['service_notification_period'] || '24x7',
+            'host_notification_period'      => contact['host_notification_period'] || '24x7',
+            'service_notification_options'  => contact['service_notification_options'] || 'w,u,c,r',
+            'host_notification_options'     => contact['host_notification_options'] || 'd,r',
+            'service_notification_commands' => 'notify-service-by-pagerduty',
+            'host_notification_commands'    => 'notify-host-by-pagerduty',
+            'pager'                         => contact['key'] || contact['pagerduty_key'],
+            'contactgroups'                 => contact['contactgroups']
+  end
+end
+
+cron 'Flush Pagerduty' do
+  user node['nagios']['user']
+  mailto 'root@localhost'
+  command "#{::File.join(node['nagios']['plugin_dir'], 'notify_pagerduty.pl')} flush"
+end

data/cookbooks/nagios/recipes/server_package.rb

@@ -0,0 +1,40 @@
+#
+# Author:: Seth Chisamore <schisamo@getchef.com>
+# Author:: Tim Smith <tsmith@chef.io>
+# Cookbook Name:: nagios
+# Recipe:: server_package
+#
+# Copyright 2011-2016, Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+case node['platform_family']
+when 'rhel'
+  include_recipe 'yum-epel' if node['nagios']['server']['install_yum-epel']
+when 'debian'
+  # Nagios package requires to enter the admin password
+  # We generate it randomly as it's overwritten later in the config templates
+  random_initial_password = rand(36**16).to_s(36)
+
+  %w(adminpassword adminpassword-repeat).each do |setting|
+    execute "debconf-set-selections::#{node['nagios']['server']['vname']}-cgi::#{node['nagios']['server']['vname']}/#{setting}" do
+      command "echo #{node['nagios']['server']['vname']}-cgi #{node['nagios']['server']['vname']}/#{setting} password #{random_initial_password} | debconf-set-selections"
+      not_if "dpkg -l #{node['nagios']['server']['vname']}"
+    end
+  end
+end
+
+node['nagios']['server']['packages'].each do |pkg|
+  package pkg
+end

data/cookbooks/nagios/recipes/server_source.rb

@@ -0,0 +1,164 @@
+#
+# Author:: Seth Chisamore <schisamo@getchef.com>
+# Author:: Tim Smith <tsmith@chef.io>
+# Cookbook Name:: nagios
+# Recipe:: server_source
+#
+# Copyright 2011-2016, Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+# Package pre-reqs
+include_recipe 'php::default'
+include_recipe 'php::module_gd'
+
+build_essential 'name' do
+  compile_time  True
+end
+
+# the source install of nagios from this recipe does not include embedded perl support
+# so unless the user explicitly set the p1_file attribute, we want to clear it
+# Note: the cookbook now defaults to Nagios 4.X which doesn't support embedded perl anyways
+node.default['nagios']['conf']['p1_file'] = nil
+
+pkgs = value_for_platform_family(
+  %w( rhel fedora ) => %w( openssl-devel gd-devel tar ),
+  'debian' => %w( libssl-dev libgd2-xpm-dev bsd-mailx tar ),
+  'default' => %w( libssl-dev libgd2-xpm-dev bsd-mailx tar )
+)
+
+pkgs.each do |pkg|
+  package pkg do
+    action :install
+  end
+end
+
+user node['nagios']['user'] do
+  action :create
+end
+
+web_srv = node['nagios']['server']['web_server']
+
+group node['nagios']['group'] do
+  members [
+    node['nagios']['user'],
+    web_srv == 'nginx' ? node['nginx']['user'] : node['apache']['user'],
+  ]
+  action :create
+end
+
+remote_file "#{Chef::Config[:file_cache_path]}/nagios_core.tar.gz" do
+  source node['nagios']['server']['url']
+  checksum node['nagios']['server']['checksum']
+end
+
+node['nagios']['server']['patches'].each do |patch|
+  remote_file "#{Chef::Config[:file_cache_path]}/#{patch}" do
+    source "#{node['nagios']['server']['patch_url']}/#{patch}"
+  end
+end
+
+execute 'extract-nagios' do
+  cwd Chef::Config[:file_cache_path]
+  command 'tar zxvf nagios_core.tar.gz'
+  not_if { ::File.exist?("#{Chef::Config[:file_cache_path]}/#{node['nagios']['server']['src_dir']}") }
+end
+
+node['nagios']['server']['patches'].each do |patch|
+  bash "patch-#{patch}" do
+    cwd Chef::Config[:file_cache_path]
+    code <<-EOF
+      cd #{node['nagios']['server']['src_dir']}
+      patch -p1 --forward --silent --dry-run < '#{Chef::Config[:file_cache_path]}/#{patch}' >/dev/null
+      if [ $? -eq 0 ]; then
+        patch -p1 --forward < '#{Chef::Config[:file_cache_path]}/#{patch}'
+      else
+        exit 0
+      fi
+    EOF
+    action :nothing
+    subscribes :run, 'execute[extract-nagios]', :immediately
+  end
+end
+
+bash 'compile-nagios' do
+  cwd Chef::Config[:file_cache_path]
+  code <<-EOH
+    cd #{node['nagios']['server']['src_dir']}
+    ./configure --prefix=/usr \
+        --mandir=/usr/share/man \
+        --bindir=/usr/sbin \
+        --sbindir=#{node['nagios']['cgi-bin']} \
+        --datadir=#{node['nagios']['docroot']} \
+        --sysconfdir=#{node['nagios']['conf_dir']} \
+        --infodir=/usr/share/info \
+        --libexecdir=#{node['nagios']['plugin_dir']} \
+        --localstatedir=#{node['nagios']['state_dir']} \
+        --enable-event-broker \
+        --with-nagios-user=#{node['nagios']['user']} \
+        --with-nagios-group=#{node['nagios']['group']} \
+        --with-command-user=#{node['nagios']['user']} \
+        --with-command-group=#{node['nagios']['group']} \
+        --with-init-dir=/etc/init.d \
+        --with-lockfile=#{node['nagios']['run_dir']}/#{node['nagios']['server']['vname']}.pid \
+        --with-mail=/usr/bin/mail \
+        --with-perlcache \
+        --with-htmurl=/ \
+        --with-cgiurl=#{node['nagios']['cgi-path']}
+    make all
+    make install
+    make install-init
+    make install-config
+    make install-commandmode
+    #{node['nagios']['source']['add_build_commands'].join("\n")}
+  EOH
+  action :nothing
+  subscribes :run, 'execute[extract-nagios]', :immediately
+end
+
+directory node['nagios']['config_dir'] do
+  owner 'root'
+  group 'root'
+  mode '0755'
+  recursive true
+end
+
+directory node['nagios']['conf']['check_result_path'] do
+  owner node['nagios']['user']
+  group node['nagios']['group']
+  mode '0755'
+  recursive true
+end
+
+%w( cache_dir log_dir run_dir ).each do |dir|
+  directory "Nagios cookbook #{node['nagios'][dir]}" do
+    path node['nagios'][dir]
+    recursive true
+    owner node['nagios']['user']
+    group node['nagios']['group']
+    mode '0755'
+  end
+end
+
+directory ::File.join(node['nagios']['log_dir'], 'archives') do
+  owner node['nagios']['user']
+  group node['nagios']['group']
+  mode '0755'
+end
+
+directory "/usr/lib/#{node['nagios']['server']['vname']}" do
+  owner node['nagios']['user']
+  group node['nagios']['group']
+  mode '0755'
+end

data/cookbooks/nagios/templates/default/apache2.conf.erb

@@ -0,0 +1,96 @@
+# Autogenerated by Chef.
+
+<% unless node['nagios']['ldap_verify_cert'].nil? %>LDAPVerifyServerCert <%= node['nagios']['ldap_verify_cert'] %><% end %>
+<% unless node['nagios']['ldap_trusted_mode'].nil? -%>LDAPTrustedMode <%= node['nagios']['ldap_trusted_mode'] %> <% end -%>
+<% unless node['nagios']['ldap_trusted_global_cert'].nil? -%>LDAPTrustedGlobalCert <%= node['nagios']['ldap_trusted_global_cert'] %> <% end -%>
+
+<VirtualHost *:<%= node['nagios']['http_port'] %>>
+  ServerAdmin     <%= node['nagios']['sysadmin_email'] %>
+<% if @nagios_url %>
+  ServerName <%= @nagios_url %>
+<% else %>
+  ServerName      <%= node['fqdn'] %>
+<% if node['nagios']['server']['server_alias'] %>
+  ServerAlias     <%= node['nagios']['server']['server_alias'] %>
+<% end %>
+<% end %>
+  DocumentRoot    <%= node['nagios']['docroot'] %>
+  CustomLog       <%= node['apache']['log_dir'] %>/nagios_access.log combined
+  ErrorLog        <%= node['apache']['log_dir'] %>/nagios_error.log
+
+<% if node['platform_family'] == 'debian' && node['nagios']['server']['install_method'] == 'package'-%>
+  Alias /stylesheets /etc/<%= node['nagios']['server']['vname'] %>/stylesheets
+  Alias /nagios3/stylesheets /etc/<%= node['nagios']['server']['vname'] %>/stylesheets
+<% end -%>
+  ScriptAlias <%= node['nagios']['cgi-path'] %> <%= node['nagios']['cgi-bin'] %>
+  ScriptAlias /cgi-bin/statusjson.cgi <%= node['nagios']['cgi-bin'] %>/statusjson.cgi
+  Alias /<%= node['nagios']['server']['vname'] %> <%= node['nagios']['docroot'] %>
+
+  <Directory "<%= node['nagios']['cgi-bin'] %>">
+     Options ExecCGI
+     <% if node['nagios']['default_user_name'] -%>
+     require all granted
+     <% end -%>
+  </Directory>
+
+<% if @https -%>
+  SSLEngine On
+  SSLProtocol all -SSLv3 -SSLv2
+  SSLCertificateFile <%= @ssl_cert_file %>
+<% if node['nagios']['ssl_cert_chain_file'] %>
+  SSLCertificateChainFile <%= node['nagios']['ssl_cert_chain_file'] %>
+<% end -%>
+  SSLCertificateKeyFile <%= @ssl_cert_key %>
+
+<% end -%>
+<% case node['nagios']['server_auth_method'] -%>
+<% when "openid" -%>
+  <Location />
+    AuthName "Nagios Server"
+    AuthType OpenID
+    require user <%= node['apache']['allowed_openids'].join(' ') %>
+    AuthOpenIDDBLocation <%= node['apache']['mod_auth_openid']['dblocation'] %>
+  </Location>
+<% when "cas" -%>
+  CASLoginURL <%= node['nagios']['cas_login_url'] %>
+  CASValidateURL <%= node['nagios']['cas_validate_url'] %>
+  CASValidateServer <%= node['nagios']['cas_validate_server'] %>
+  <% if node['nagios']['cas_root_proxy_url'] -%>
+  CASRootProxiedAs <%= node['nagios']['cas_root_proxy_url'] %>
+  <% end -%>
+
+  <Location />
+    AuthType CAS
+    require <%= node['nagios']['server_auth_require'] %>
+  </Location>
+<% when "ldap" -%>
+  <Location />
+    AuthName "Nagios Server"
+    AuthType Basic
+    AuthBasicProvider ldap
+    <% unless node['nagios']['ldap_group_attribute_is_dn'].nil? %>AuthLDAPGroupAttributeIsDN <%= node['nagios']['ldap_group_attribute_is_dn'] %><% end %>
+    <% unless node['nagios']['ldap_group_attribute'].nil? -%>AuthLDAPGroupAttribute "<%= node['nagios']['ldap_group_attribute'] %>" <% end -%>
+    <% unless node['nagios']['ldap_bind_dn'].nil? -%>AuthLDAPBindDN "<%= node['nagios']['ldap_bind_dn'] %>" <% end -%>
+    <% unless node['nagios']['ldap_bind_password'].nil? -%>AuthLDAPBindPassword "<%= node['nagios']['ldap_bind_password'] %>"<% end -%>
+    AuthLDAPURL "<%= node['nagios']['ldap_url'] %>"
+    <% if node['apache']['version'] < "2.4" and !node['nagios']['ldap_authoritative'].nil? %>AuthzLDAPAuthoritative <%= node['nagios']['ldap_authoritative'] %><% end %>
+    require <%= node['nagios']['server_auth_require'] %>
+  </Location>
+<% else -%>
+  <Location />
+    AuthName "Nagios Server"
+    AuthType Basic
+    AuthUserFile "<%= node['nagios']['conf_dir'] %>/htpasswd.users"
+    require <%= node['nagios']['server_auth_require'] %>
+    <% unless node['nagios']['allowed_ips'].empty? -%>
+    Order Deny,Allow
+    Deny from All
+    Allow from <%=node['nagios']['allowed_ips'].join(' ') %>
+    Satisfy Any
+    <% end -%>
+  </Location>
+<% end -%>
+
+  SetEnv TZ "<%= node['nagios']['conf']['use_timezone'] %>"
+
+</VirtualHost>