cloud-mu 3.6.9 → 3.6.11
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/Berksfile +2 -3
- data/Berksfile.lock +11 -14
- data/bin/mu-aws-setup +16 -4
- data/bin/mu-configure +2 -1
- data/cloud-mu.gemspec +2 -2
- data/cookbooks/mu-firewall/Berksfile +1 -1
- data/cookbooks/mu-firewall/attributes/default.rb +2 -2
- data/cookbooks/mu-firewall/metadata.rb +3 -3
- data/cookbooks/mu-firewall/recipes/default.rb +11 -2
- data/cookbooks/mu-master/Berksfile +1 -1
- data/cookbooks/mu-master/attributes/default.rb +14 -1
- data/cookbooks/mu-master/files/default/389ds-perl/ASDialogs.pm +173 -0
- data/cookbooks/mu-master/files/default/389ds-perl/AdminMigration.pm +569 -0
- data/cookbooks/mu-master/files/default/389ds-perl/AdminServer.pm +952 -0
- data/cookbooks/mu-master/files/default/389ds-perl/AdminUtil.pm +983 -0
- data/cookbooks/mu-master/files/default/389ds-perl/ConfigDSDialogs.pm +449 -0
- data/cookbooks/mu-master/files/default/389ds-perl/DSCreate.pm +1551 -0
- data/cookbooks/mu-master/files/default/389ds-perl/DSDialogs.pm +233 -0
- data/cookbooks/mu-master/files/default/389ds-perl/DSMigration.pm +1175 -0
- data/cookbooks/mu-master/files/default/389ds-perl/DSUpdate.pm +534 -0
- data/cookbooks/mu-master/files/default/389ds-perl/DSUpdateDialogs.pm +152 -0
- data/cookbooks/mu-master/files/default/389ds-perl/DSUtil.pm +1710 -0
- data/cookbooks/mu-master/files/default/389ds-perl/Dialog.pm +249 -0
- data/cookbooks/mu-master/files/default/389ds-perl/DialogManager.pm +212 -0
- data/cookbooks/mu-master/files/default/389ds-perl/FileConn.pm +461 -0
- data/cookbooks/mu-master/files/default/389ds-perl/Inf.pm +268 -0
- data/cookbooks/mu-master/files/default/389ds-perl/Migration.pm +327 -0
- data/cookbooks/mu-master/files/default/389ds-perl/RegDSDialogs.pm +94 -0
- data/cookbooks/mu-master/files/default/389ds-perl/Resource.pm +137 -0
- data/cookbooks/mu-master/files/default/389ds-perl/Setup.pm +240 -0
- data/cookbooks/mu-master/files/default/389ds-perl/SetupDialogs.pm +243 -0
- data/cookbooks/mu-master/files/default/389ds-perl/SetupLog.pm +82 -0
- data/cookbooks/mu-master/files/default/setCertName.ldif +4 -0
- data/cookbooks/mu-master/libraries/mu.rb +2 -2
- data/cookbooks/mu-master/metadata.rb +1 -1
- data/cookbooks/mu-master/recipes/389ds.rb +71 -32
- data/cookbooks/mu-master/recipes/basepackages.rb +5 -0
- data/cookbooks/mu-master/recipes/default.rb +16 -5
- data/cookbooks/mu-master/recipes/init.rb +59 -4
- data/cookbooks/mu-master/recipes/ssl-certs.rb +6 -0
- data/cookbooks/mu-master/recipes/sssd.rb +85 -62
- data/cookbooks/mu-master/recipes/update_nagios_only.rb +7 -1
- data/cookbooks/mu-master/templates/default/389-directory-setup.inf.erb +11 -26
- data/cookbooks/mu-master/templates/default/sssd.conf.erb +18 -8
- data/cookbooks/mu-tools/files/default/Mu_CA.pem +33 -0
- data/cookbooks/mu-tools/metadata.rb +0 -1
- data/cookbooks/mu-tools/recipes/set_local_fw.rb +7 -1
- data/cookbooks/mu-tools/templates/amazon/sshd_config.erb +5 -1
- data/cookbooks/nagios/CHANGELOG.md +679 -0
- data/cookbooks/nagios/LICENSE +201 -0
- data/cookbooks/nagios/README.md +340 -0
- data/cookbooks/nagios/attributes/config.rb +163 -0
- data/cookbooks/nagios/attributes/default.rb +204 -0
- data/cookbooks/nagios/libraries/base.rb +311 -0
- data/cookbooks/nagios/libraries/command.rb +68 -0
- data/cookbooks/nagios/libraries/contact.rb +229 -0
- data/cookbooks/nagios/libraries/contactgroup.rb +111 -0
- data/cookbooks/{firewall/recipes/disable_firewall.rb → nagios/libraries/custom_option.rb} +20 -7
- data/cookbooks/nagios/libraries/data_bag_helper.rb +23 -0
- data/cookbooks/nagios/libraries/default.rb +90 -0
- data/cookbooks/nagios/libraries/helpers.rb +229 -0
- data/cookbooks/nagios/libraries/host.rb +410 -0
- data/cookbooks/nagios/libraries/hostdependency.rb +178 -0
- data/cookbooks/nagios/libraries/hostescalation.rb +170 -0
- data/cookbooks/nagios/libraries/hostgroup.rb +117 -0
- data/cookbooks/nagios/libraries/nagios.rb +277 -0
- data/cookbooks/nagios/libraries/resource.rb +59 -0
- data/cookbooks/nagios/libraries/service.rb +449 -0
- data/cookbooks/nagios/libraries/servicedependency.rb +213 -0
- data/cookbooks/nagios/libraries/serviceescalation.rb +193 -0
- data/cookbooks/nagios/libraries/servicegroup.rb +142 -0
- data/cookbooks/nagios/libraries/timeperiod.rb +159 -0
- data/cookbooks/nagios/libraries/users_helper.rb +54 -0
- data/cookbooks/nagios/metadata.json +44 -0
- data/cookbooks/nagios/metadata.rb +22 -0
- data/cookbooks/nagios/recipes/_load_databag_config.rb +153 -0
- data/cookbooks/nagios/recipes/_load_default_config.rb +241 -0
- data/cookbooks/nagios/recipes/apache.rb +114 -0
- data/cookbooks/nagios/recipes/default.rb +41 -0
- data/cookbooks/nagios/recipes/nginx.rb +114 -0
- data/cookbooks/nagios/recipes/pagerduty.rb +95 -0
- data/cookbooks/nagios/recipes/server.rb +182 -0
- data/cookbooks/nagios/recipes/server_package.rb +85 -0
- data/cookbooks/nagios/recipes/server_source.rb +137 -0
- data/cookbooks/nagios/resources/command.rb +34 -0
- data/cookbooks/nagios/resources/conf.rb +52 -0
- data/cookbooks/nagios/resources/contact.rb +34 -0
- data/cookbooks/nagios/resources/contactgroup.rb +35 -0
- data/cookbooks/nagios/resources/host.rb +35 -0
- data/cookbooks/nagios/resources/hostdependency.rb +35 -0
- data/cookbooks/nagios/resources/hostescalation.rb +36 -0
- data/cookbooks/nagios/resources/hostgroup.rb +35 -0
- data/cookbooks/nagios/resources/resource.rb +34 -0
- data/cookbooks/nagios/resources/service.rb +35 -0
- data/cookbooks/nagios/resources/servicedependency.rb +35 -0
- data/cookbooks/nagios/resources/serviceescalation.rb +35 -0
- data/cookbooks/nagios/resources/servicegroup.rb +35 -0
- data/cookbooks/nagios/resources/timeperiod.rb +35 -0
- data/cookbooks/nagios/templates/apache2.conf.erb +102 -0
- data/cookbooks/nagios/templates/cgi.cfg.erb +266 -0
- data/cookbooks/nagios/templates/commands.cfg.erb +13 -0
- data/cookbooks/nagios/templates/contacts.cfg.erb +37 -0
- data/cookbooks/nagios/templates/hostgroups.cfg.erb +25 -0
- data/cookbooks/nagios/templates/hosts.cfg.erb +15 -0
- data/cookbooks/nagios/templates/htpasswd.users.erb +6 -0
- data/cookbooks/nagios/templates/nagios.cfg.erb +22 -0
- data/cookbooks/nagios/templates/nginx.conf.erb +80 -0
- data/cookbooks/nagios/templates/pagerduty.cgi.erb +185 -0
- data/cookbooks/nagios/templates/resource.cfg.erb +27 -0
- data/cookbooks/nagios/templates/servicedependencies.cfg.erb +15 -0
- data/cookbooks/nagios/templates/servicegroups.cfg.erb +14 -0
- data/cookbooks/nagios/templates/services.cfg.erb +14 -0
- data/cookbooks/nagios/templates/spawn-fcgi.erb +10 -0
- data/cookbooks/nagios/templates/templates.cfg.erb +31 -0
- data/cookbooks/nagios/templates/timeperiods.cfg.erb +13 -0
- data/extras/platform_berksfile_base +3 -3
- data/extras/python_rpm/build.sh +4 -4
- data/extras/python_rpm/muthon.spec +2 -4
- data/extras/vault_tools/export_vaults.sh +11 -1
- data/install/installer +1 -1
- data/modules/mu/kittens.rb +27523 -0
- data/modules/mu/master/ldap.rb +48 -31
- data/modules/mu/master.rb +69 -0
- data/modules/mu/mu.yaml.rb +351 -0
- data/modules/mu/providers/aws/firewall_rule.rb +3 -1
- data/modules/mu/providers/aws.rb +27 -19
- data/modules/mu/providers/google.rb +1 -1
- data/modules/mu.rb +5 -4
- metadata +99 -48
- data/cookbooks/firewall/CHANGELOG.md +0 -488
- data/cookbooks/firewall/LICENSE +0 -202
- data/cookbooks/firewall/README.md +0 -366
- data/cookbooks/firewall/TODO.md +0 -6
- data/cookbooks/firewall/attributes/default.rb +0 -5
- data/cookbooks/firewall/attributes/firewalld.rb +0 -8
- data/cookbooks/firewall/attributes/iptables.rb +0 -17
- data/cookbooks/firewall/attributes/ufw.rb +0 -12
- data/cookbooks/firewall/attributes/windows.rb +0 -8
- data/cookbooks/firewall/libraries/helpers.rb +0 -105
- data/cookbooks/firewall/libraries/helpers_firewalld.rb +0 -116
- data/cookbooks/firewall/libraries/helpers_firewalld_dbus.rb +0 -72
- data/cookbooks/firewall/libraries/helpers_iptables.rb +0 -112
- data/cookbooks/firewall/libraries/helpers_nftables.rb +0 -170
- data/cookbooks/firewall/libraries/helpers_ufw.rb +0 -142
- data/cookbooks/firewall/libraries/helpers_windows.rb +0 -129
- data/cookbooks/firewall/libraries/provider_firewall_firewalld.rb +0 -179
- data/cookbooks/firewall/libraries/provider_firewall_iptables.rb +0 -171
- data/cookbooks/firewall/libraries/provider_firewall_iptables_ubuntu.rb +0 -200
- data/cookbooks/firewall/libraries/provider_firewall_iptables_ubuntu1404.rb +0 -200
- data/cookbooks/firewall/libraries/provider_firewall_rule.rb +0 -34
- data/cookbooks/firewall/libraries/provider_firewall_ufw.rb +0 -138
- data/cookbooks/firewall/libraries/provider_firewall_windows.rb +0 -126
- data/cookbooks/firewall/libraries/resource_firewall.rb +0 -26
- data/cookbooks/firewall/libraries/resource_firewall_rule.rb +0 -52
- data/cookbooks/firewall/metadata.json +0 -40
- data/cookbooks/firewall/metadata.rb +0 -15
- data/cookbooks/firewall/recipes/default.rb +0 -76
- data/cookbooks/firewall/recipes/firewalld.rb +0 -87
- data/cookbooks/firewall/resources/firewalld.rb +0 -28
- data/cookbooks/firewall/resources/firewalld_config.rb +0 -39
- data/cookbooks/firewall/resources/firewalld_helpers.rb +0 -106
- data/cookbooks/firewall/resources/firewalld_icmptype.rb +0 -88
- data/cookbooks/firewall/resources/firewalld_ipset.rb +0 -104
- data/cookbooks/firewall/resources/firewalld_policy.rb +0 -115
- data/cookbooks/firewall/resources/firewalld_service.rb +0 -98
- data/cookbooks/firewall/resources/firewalld_zone.rb +0 -118
- data/cookbooks/firewall/resources/nftables.rb +0 -71
- data/cookbooks/firewall/resources/nftables_rule.rb +0 -113
- data/cookbooks/firewall/templates/default/ufw/default.erb +0 -13
- /data/cookbooks/{firewall → nagios}/chefignore +0 -0
- /data/cookbooks/{firewall → nagios}/renovate.json +0 -0
@@ -0,0 +1,15 @@
|
|
1
|
+
# $Id: Generated by chef for node: <%= node['hostname'] %>
|
2
|
+
# ----------------------------------------------------------------
|
3
|
+
# NOTE: This file is controlled by chef templates!
|
4
|
+
# Do not edit or change this file but change the following:
|
5
|
+
# template file : servicedependencies.cfg.erb
|
6
|
+
# ----------------------------------------------------------------
|
7
|
+
# Service Dependency Definitions
|
8
|
+
# ----------------------------------------------------------------
|
9
|
+
|
10
|
+
<% Nagios.instance.servicedependencies.each do |key,dependency| -%>
|
11
|
+
<% if dependency.name.nil? # Skipping all the template servicedependencies %>
|
12
|
+
<%= dependency.definition %>
|
13
|
+
|
14
|
+
<% end %>
|
15
|
+
<% end -%>
|
@@ -0,0 +1,14 @@
|
|
1
|
+
# ----------------------------------------------------------------
|
2
|
+
# NOTE: This file is controlled by chef templates!
|
3
|
+
# Do not edit or change this file but change the following:
|
4
|
+
# template file : servicegroups.cfg.erb
|
5
|
+
# ----------------------------------------------------------------
|
6
|
+
# Servicegroup definitions
|
7
|
+
# ----------------------------------------------------------------
|
8
|
+
|
9
|
+
<% Nagios.instance.servicegroups.each do |key,servicegroup| -%>
|
10
|
+
<% if servicegroup.name.nil? # Skipping all the template servicegroups %>
|
11
|
+
<%= servicegroup.definition %>
|
12
|
+
|
13
|
+
<% end %>
|
14
|
+
<% end -%>
|
@@ -0,0 +1,14 @@
|
|
1
|
+
# ----------------------------------------------------------------
|
2
|
+
# NOTE: This file is controlled by chef templates!
|
3
|
+
# Do not edit or change this file but change the following:
|
4
|
+
# template file : services.cfg.erb
|
5
|
+
# ----------------------------------------------------------------
|
6
|
+
# Service definitions
|
7
|
+
# ----------------------------------------------------------------
|
8
|
+
|
9
|
+
<% Nagios.instance.services.each do |key,service| -%>
|
10
|
+
<% if service.name.nil? # Skipping all the template services %>
|
11
|
+
<%= service.definition %>
|
12
|
+
|
13
|
+
<% end %>
|
14
|
+
<% end -%>
|
@@ -0,0 +1,10 @@
|
|
1
|
+
#
|
2
|
+
# Generated by chef for node: <%= node['hostname'] %>
|
3
|
+
#
|
4
|
+
FCGI_SOCKET=<%= node['nagios']['server']['nginx_dispatch']['cgi_url'].split(':').last %>
|
5
|
+
## FCGI_PROGRAM=/usr/bin/php-cgi
|
6
|
+
FCGI_PROGRAM=/usr/sbin/fcgiwrap
|
7
|
+
FCGI_USER=<%= @nginx_user %>
|
8
|
+
FCGI_GROUP=<%= @nginx_user %>
|
9
|
+
FCGI_EXTRA_OPTIONS="-M 0750"
|
10
|
+
OPTIONS="-u $FCGI_USER -g $FCGI_GROUP -s $FCGI_SOCKET -S $FCGI_EXTRA_OPTIONS -F 1 -P /var/run/spawn-fcgi.pid -- $FCGI_PROGRAM"
|
@@ -0,0 +1,31 @@
|
|
1
|
+
# $Id: Generated by chef for node: <%= node['hostname'] %>
|
2
|
+
# ----------------------------------------------------------------
|
3
|
+
# NOTE: This file is controlled by chef templates!
|
4
|
+
# Do not edit or change this file but change the following:
|
5
|
+
# template file : templates.cfg.erb
|
6
|
+
# ----------------------------------------------------------------
|
7
|
+
# Contact definitions
|
8
|
+
# Host definitions
|
9
|
+
# Service definitions
|
10
|
+
# ----------------------------------------------------------------
|
11
|
+
|
12
|
+
<% Nagios.instance.contacts.each do |key,contact| -%>
|
13
|
+
<% if contact.name # Only get all the template contacts %>
|
14
|
+
<%= contact.definition %>
|
15
|
+
|
16
|
+
<% end %>
|
17
|
+
<% end -%>
|
18
|
+
|
19
|
+
<% Nagios.instance.hosts.each do |key,host| -%>
|
20
|
+
<% if host.name # Only get all the template hosts %>
|
21
|
+
<%= host.definition %>
|
22
|
+
|
23
|
+
<% end %>
|
24
|
+
<% end -%>
|
25
|
+
|
26
|
+
<% Nagios.instance.services.each do |key,service| -%>
|
27
|
+
<% if service.name # Only get all the template services %>
|
28
|
+
<%= service.definition %>
|
29
|
+
|
30
|
+
<% end %>
|
31
|
+
<% end -%>
|
@@ -0,0 +1,13 @@
|
|
1
|
+
# $Id: Generated by chef for node: <%= node['hostname'] %>
|
2
|
+
# ----------------------------------------------------------------
|
3
|
+
# NOTE: This file is controlled by chef templates!
|
4
|
+
# Do not edit or change this file but change the following:
|
5
|
+
# template file : timeperiods.cfg.erb
|
6
|
+
# ----------------------------------------------------------------
|
7
|
+
# Time period definitions
|
8
|
+
# ----------------------------------------------------------------
|
9
|
+
|
10
|
+
<% Nagios.instance.timeperiods.each do |entry,timeperiod| -%>
|
11
|
+
<%= timeperiod.definition %>
|
12
|
+
|
13
|
+
<% end -%>
|
@@ -6,16 +6,16 @@ if ENV.include? "MU_COOKBOOK_ROOT"
|
|
6
6
|
siteCookbookPath = "#{ENV['MU_COOKBOOK_ROOT']}/site_cookbooks"
|
7
7
|
if ENV.include? "MU_DEPRESOLVE"
|
8
8
|
["cookbooks", "site_cookbooks"].each { |dir|
|
9
|
-
next if !Dir.
|
9
|
+
next if !Dir.exist?(ENV['MU_COOKBOOK_ROOT']+"/"+dir)
|
10
10
|
Dir.foreach(ENV['MU_COOKBOOK_ROOT']+"/"+dir).each { |cb|
|
11
11
|
next if cb == "." or cb == ".."
|
12
12
|
path = ENV['MU_COOKBOOK_ROOT']+"/"+dir+"/"+cb
|
13
|
-
next if !File.
|
13
|
+
next if !File.exist?(path+"/metadata.rb") and !File.exist?(path+"/metadata.json")
|
14
14
|
addtl_cookbooks[cb] = { "path" => path }
|
15
15
|
}
|
16
16
|
}
|
17
17
|
# now to smoke some rocks
|
18
|
-
if File.
|
18
|
+
if File.exist?("#{ENV['MU_COOKBOOK_ROOT']}/Berksfile.lock")
|
19
19
|
in_deps = false
|
20
20
|
File.open("#{ENV['MU_COOKBOOK_ROOT']}/Berksfile.lock").each { |line|
|
21
21
|
if in_deps
|
data/extras/python_rpm/build.sh
CHANGED
@@ -5,17 +5,17 @@ rpm -q rpm-build || yum -y install rpm-build
|
|
5
5
|
base="/opt/mu/lib/extras/python_rpm"
|
6
6
|
|
7
7
|
for d in BUILD BUILDROOT RPMS SOURCES SPECS SRPMS;do
|
8
|
-
mkdir -p
|
8
|
+
mkdir -p /root/rpmbuild/$d
|
9
9
|
done
|
10
|
-
cd
|
10
|
+
cd /root/rpmbuild
|
11
11
|
|
12
12
|
echo "Temporarily deleting /usr/local/python-current so rpmbuild can create it"
|
13
13
|
link="`readlink /usr/local/python-current`"
|
14
14
|
rm -f /usr/local/python-current
|
15
15
|
chmod 000 /usr/bin/python # otherwise this brain-dead build system tries to compile parts of itself with the wrong executable
|
16
|
-
env -i PATH="/bin:/usr/bin" /usr/bin/rpmbuild -ba $base/muthon.spec
|
16
|
+
env -i HOME=/root PATH="/bin:/usr/bin" /usr/bin/rpmbuild -ba $base/muthon.spec
|
17
17
|
chmod 755 /usr/bin/python
|
18
|
-
find
|
18
|
+
find /root/rpmbuild/ -type f -name 'muthon*' -exec ls -la {} \;
|
19
19
|
if [ "$link" != "" ];then
|
20
20
|
ln -s "$link" /usr/local/python-current
|
21
21
|
fi
|
@@ -1,7 +1,7 @@
|
|
1
1
|
Summary: Python for Mu
|
2
2
|
BuildArch: x86_64
|
3
3
|
Name: muthon
|
4
|
-
Version: 3.
|
4
|
+
Version: 3.13.1
|
5
5
|
Release: 1%{dist}
|
6
6
|
Group: Development/Languages
|
7
7
|
License: https://docs.python.org/3/license.html
|
@@ -12,9 +12,6 @@ Source: https://www.python.org/ftp/python/%{version}/Python-%{version}.tgz
|
|
12
12
|
# auto-require inserts nonsensical things, like a dependency on our own
|
13
13
|
# executable, so I guess we'll declare dependencies by package ourselves
|
14
14
|
AutoReq: no
|
15
|
-
# XXX these don't work for some reason
|
16
|
-
#%global __requires_exclude ^/usr/local/bin/python$
|
17
|
-
#%global __requires_exclude ^/opt/pythons/Python-%{version}/bin/python.*$
|
18
15
|
|
19
16
|
%{?el6:BuildRequires: mussl}
|
20
17
|
%{?el6:BuildRequires: muqlite}
|
@@ -63,6 +60,7 @@ env -i PATH="/bin:/usr/bin" make
|
|
63
60
|
%install
|
64
61
|
cd $RPM_BUILD_DIR/Python-%{version}
|
65
62
|
env -i PATH="/bin:/usr/bin" make install
|
63
|
+
sed -i 's/^#!\/usr\/bin\/env python/\/usr\/bin\/python3/' /opt/pythons/Python-3.13.1/lib/python3.13/encodings/rot_13.py
|
66
64
|
%{prefix}/Python-%{version}/bin/python3 $RPM_SOURCE_DIR/get-pip.py --prefix %{prefix}/Python-%{version}/ || ( ldd %{prefix}/Python-%{version}/bin/python3 ; exit 1 )
|
67
65
|
mkdir -p $RPM_BUILD_ROOT%{prefix}
|
68
66
|
mv %{prefix}/Python-%{version} $RPM_BUILD_ROOT%{prefix}/
|
@@ -1,3 +1,13 @@
|
|
1
1
|
#!/bin/bash
|
2
2
|
# Exports existing vaults to a vaults directory for use by test_vaults and recreate_vaults
|
3
|
-
mkdir -p ~/vaults
|
3
|
+
mkdir -p ~/vaults
|
4
|
+
cd
|
5
|
+
for i in `knife vault list | egrep -v '^INFO:'`;do
|
6
|
+
echo "VAULTNAME: $i"
|
7
|
+
mkdir -p vaults/$i
|
8
|
+
for j in `knife data bag show $i | egrep -v '^INFO:|_keys$'`;do
|
9
|
+
echo " ITEM: $j"
|
10
|
+
knife vault show "$i" "$j" -F json | grep -v '^INFO:' > ~/vaults/$i/$j.json
|
11
|
+
done
|
12
|
+
done
|
13
|
+
find ~/vaults -empty -delete
|