cucumber-chef 0.4.0

data/cookbooks/cucumber-chef/README.rdoc

@@ -0,0 +1,8 @@
+= DESCRIPTION:
+
+= REQUIREMENTS:
+
+= ATTRIBUTES:
+
+= USAGE:
+

data/cookbooks/cucumber-chef/files/default/add-git-identity

@@ -0,0 +1,2 @@
+eval $(ssh-agent) > /dev/null 2>&1
+ssh-add /root/.ssh/git-key.rsa > /dev/null 2>&1

data/cookbooks/cucumber-chef/files/default/controller-first-boot

@@ -0,0 +1 @@
+{ "run_list": [ "recipe[cucumber-chef::testrunner]" ] }

data/cookbooks/cucumber-chef/files/default/cucumber-net

@@ -0,0 +1,5 @@
+lxc.network.type = veth
+lxc.network.flags = up
+lxc.network.link = br0
+lxc.network.name = eth0
+lxc.network.ipv4 = 192.168.3.2/24

data/cookbooks/cucumber-chef/files/default/cucumber-private-key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

data/cookbooks/cucumber-chef/files/default/cucumber-run_list

@@ -0,0 +1 @@
+{ "run_list": [ "role[base]" ] }

data/cookbooks/cucumber-chef/files/default/git-private-key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

data/cookbooks/cucumber-chef/files/default/install-chef

@@ -0,0 +1 @@
+/usr/bin/apt-get update && /usr/bin/apt-get --assume-yes --allow-unauthenticated install ruby1.9.1p180 && /usr/local/bin/gem install chef --no-ri --no-rdoc

data/cookbooks/cucumber-chef/files/default/lxc-controller-network-config

@@ -0,0 +1,5 @@
+lxc.network.type = veth
+lxc.network.flags = up
+lxc.network.link = br0
+lxc.network.name = eth0
+lxc.network.ipv4 = 192.168.20.10/24

data/cookbooks/cucumber-chef/files/default/lxc-lucid-chef

@@ -0,0 +1,377 @@
+
+#!/bin/bash
+
+configure_ubuntu()
+{
+    rootfs=$1
+    hostname=$2
+
+    # disable selinux in ubuntu
+    mkdir -p $rootfs/selinux
+    echo 0 > $rootfs/selinux/enforce
+
+    # set the hostname
+    cat <<EOF > $rootfs/etc/hostname
+$hostname
+EOF
+    # set minimal hosts
+    cat <<EOF > $rootfs/etc/hosts
+127.0.0.1 localhost $hostname
+EOF
+
+    # provide the lxc service
+    cat <<EOF > $rootfs/etc/init/lxc.conf
+# fake some events needed for correct startup other services
+
+description     "Container Upstart"
+
+start on startup
+
+script
+        rm -rf /var/run/*.pid
+        rm -rf /var/run/network/*
+        /sbin/initctl emit stopped JOB=udevtrigger --no-wait
+        /sbin/initctl emit started JOB=udev --no-wait
+end script
+EOF
+
+    # fix buggus runlevel with sshd
+    cat <<EOF > $rootfs/etc/init/ssh.conf
+# ssh - OpenBSD Secure Shell server
+#
+# The OpenSSH server provides secure shell access to the system.
+
+description	"OpenSSH server"
+
+start on filesystem
+stop on runlevel [!2345]
+
+expect fork
+respawn
+respawn limit 10 5
+umask 022
+# replaces SSHD_OOM_ADJUST in /etc/default/ssh
+oom never
+
+pre-start script
+    test -x /usr/sbin/sshd || { stop; exit 0; }
+    test -e /etc/ssh/sshd_not_to_be_run && { stop; exit 0; }
+    test -c /dev/null || { stop; exit 0; }
+
+    mkdir -p -m0755 /var/run/sshd
+end script
+
+# if you used to set SSHD_OPTS in /etc/default/ssh, you can change the
+# 'exec' line here instead
+exec /usr/sbin/sshd
+EOF
+
+    cat <<EOF > $rootfs/etc/init/console.conf
+# console - getty
+#
+# This service maintains a console on tty1 from the point the system is
+# started until it is shut down again.
+
+start on stopped rc RUNLEVEL=[2345]
+stop on runlevel [!2345]
+
+respawn
+exec /sbin/getty -8 38400 /dev/console
+EOF
+
+    cat <<EOF > $rootfs/lib/init/fstab
+# /lib/init/fstab: lxc system fstab
+none            /spu                      spufs           gid=spu,optional                  0 0
+none            /tmp                      none            defaults                          0 0
+none            /var/lock                 tmpfs           nodev,noexec,nosuid,showthrough   0 0
+none            /lib/init/rw              tmpfs           mode=0755,nosuid,optional         0 0
+EOF
+
+
+
+    # reconfigure some services
+    if [ -z "$LANG" ]; then
+	chroot $rootfs locale-gen en_US.UTF-8
+	chroot $rootfs update-locale LANG=en_US.UTF-8
+    else
+	chroot $rootfs locale-gen $LANG
+	chroot $rootfs update-locale LANG=$LANG
+    fi
+
+    # remove pointless services in a container
+    chroot $rootfs /usr/sbin/update-rc.d -f ondemand remove
+
+    chroot $rootfs /bin/bash -c 'cd /etc/init; for f in $(ls u*.conf); do mv $f $f.orig; done'
+    chroot $rootfs /bin/bash -c 'cd /etc/init; for f in $(ls tty[2-9].conf); do mv $f $f.orig; done'
+    chroot $rootfs /bin/bash -c 'cd /etc/init; for f in $(ls plymouth*.conf); do mv $f $f.orig; done'
+    chroot $rootfs /bin/bash -c 'cd /etc/init; for f in $(ls hwclock*.conf); do mv $f $f.orig; done'
+    chroot $rootfs /bin/bash -c 'cd /etc/init; for f in $(ls module*.conf); do mv $f $f.orig; done'
+
+    echo "Please change root-password !"
+    echo "root:root" | chroot $rootfs chpasswd
+
+    return 0
+}
+
+configure_image()
+{
+    image=$cache/rootfs-$arch
+    mkdir $image/root/.ssh
+    chmod 0600 /root/.ssh
+
+    cat <<EOF > $image/etc/rc.local
+#!/bin/sh -e
+ip route add default via 192.168.20.1
+exit 0
+EOF
+
+    cat <<EOF > $image/root/.ssh/authorized_keys
+ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzj2O8BxvLn1Q7vUTiyFdtle9SeataEF//+651mXTV8WdKuXGRgvIKZPu+ZnTsqnDoR+pwMRFf95hDPHScpdYj2WVY1cN2e6xEKEsz3xcKdhaTuAOBd47J9wu6Nmgr1aZ/2/AWTrLEOMxUVVp/bzeSFzfHR2bctfKCKzMUCLGZLEGn0Yv5Qbk56Vr9A5jUJcKgCodWOpTcPlf+kKzxejgt/wHRZTRrJIOyx5Zhddim10/sZZ8ct9+WgBwhIL2fUHrsAb1wjxKpQCOYoxHuRSFnv4zrFzblI737TmQIHkkb9g08z3qIJLLiLKgGNXP2wclA37ctGfqwfJWj9FA9nI9iQ== root@cucumber
+EOF
+    
+    mkdir $image/etc/chef
+
+    cat <<EOF > $image/tmp/validation.pem
+<%= IO.read(Chef::Config[:validation_key]) %>
+EOF
+    awk NF $image/tmp/validation.pem > $image/etc/chef/validation.pem
+    rm $image/tmp/validation.pem
+    
+    cat <<EOF > $image/etc/apt/sources.list.d/atalanta.list
+deb http://packages.atalanta-systems.com lucid main
+EOF
+
+    rm $image/etc/resolv.conf
+    cp /etc/resolv.conf $image/etc/resolv.conf
+    cp /etc/lxc/install-chef.sh $image/tmp/install-chef.sh
+    chroot $image /bin/sh -c "/usr/bin/apt-get update && /usr/bin/apt-get --assume-yes --allow-unauthenticated install strace ruby1.9.1p180"
+    mkdir -p $image/$HOME
+    chroot $image /bin/sh -c "strace /usr/local/bin/gem install chef --no-ri --no-rdoc 2>&1" 2>&1 >> /tmp/data
+    return $?
+}
+
+download_ubuntu()
+{
+    packages=dialog,apt,apt-utils,resolvconf,iproute,inetutils-ping,vim,dhcp3-client,ssh,lsb-release,wget,gpgv,gnupg
+
+    cache=$1
+    arch=$2
+
+    # check the mini ubuntu was not already downloaded
+    mkdir -p "$cache/partial-$arch"
+    if [ $? -ne 0 ]; then
+	echo "Failed to create '$cache/partial-$arch' directory"
+	return 1
+    fi
+
+    # download a mini ubuntu into a cache
+    echo "Downloading ubuntu minimal ..."
+    debootstrap --verbose --variant=minbase --components=main,universe --arch=$arch --include=$packages lucid $cache/partial-$arch
+    if [ $? -ne 0 ]; then
+	echo "Failed to download the rootfs, aborting."
+	return 1
+    fi
+
+    mv "$1/partial-$arch" "$1/rootfs-$arch"
+    echo "Download complete."
+
+    return 0
+}
+
+copy_ubuntu()
+{
+    cache=$1
+    arch=$2
+    rootfs=$3
+
+    # make a local copy of the miniubuntu
+    echo -n "Copying rootfs to $rootfs ..."
+    cp -a $cache/rootfs-$arch $rootfs || return 1
+    return 0
+}
+
+install_ubuntu()
+{
+    cache="/var/cache/lxc/ubuntu"
+    rootfs=$1
+    mkdir -p /var/lock/subsys/
+    (
+	flock -n -x 200
+	if [ $? -ne 0 ]; then
+	    echo "Cache repository is busy."
+	    return 1
+	fi
+
+	arch=$(arch)
+	if [ "$arch" == "x86_64" ]; then
+	    arch=amd64
+	fi
+
+	if [ "$arch" == "i686" ]; then
+	    arch=i386
+	fi
+
+	echo "Checking cache download in $cache/rootfs-$arch ... "
+	if [ ! -e "$cache/rootfs-$arch" ]; then
+	    download_ubuntu $cache $arch
+	    if [ $? -ne 0 ]; then
+		echo "Failed to download 'ubuntu base'"
+		return 1
+	    fi
+	fi
+        configure_image
+	echo "Copy $cache/rootfs-$arch to $rootfs ... "
+	copy_ubuntu $cache $arch $rootfs
+	if [ $? -ne 0 ]; then
+	    echo "Failed to copy rootfs"
+	    return 1
+	fi
+
+	return 0
+
+	) 200>/var/lock/subsys/lxc
+
+    return $?
+}
+
+copy_configuration()
+{
+    path=$1
+    rootfs=$2
+    name=$3
+
+    cat <<EOF >> $path/config
+lxc.utsname = $name
+
+lxc.tty = 4
+lxc.pts = 1024
+lxc.rootfs = $rootfs
+lxc.mount  = $path/fstab
+
+lxc.cgroup.devices.deny = a
+# /dev/null and zero
+lxc.cgroup.devices.allow = c 1:3 rwm
+lxc.cgroup.devices.allow = c 1:5 rwm
+# consoles
+lxc.cgroup.devices.allow = c 5:1 rwm
+lxc.cgroup.devices.allow = c 5:0 rwm
+lxc.cgroup.devices.allow = c 4:0 rwm
+lxc.cgroup.devices.allow = c 4:1 rwm
+# /dev/{,u}random
+lxc.cgroup.devices.allow = c 1:9 rwm
+lxc.cgroup.devices.allow = c 1:8 rwm
+lxc.cgroup.devices.allow = c 136:* rwm
+lxc.cgroup.devices.allow = c 5:2 rwm
+# rtc
+lxc.cgroup.devices.allow = c 254:0 rwm
+EOF
+
+    cat <<EOF > $path/fstab
+proc            $rootfs/proc         proc    nodev,noexec,nosuid 0 0
+devpts          $rootfs/dev/pts      devpts defaults 0 0
+sysfs           $rootfs/sys          sysfs defaults  0 0
+EOF
+
+    if [ $? -ne 0 ]; then
+	echo "Failed to add configuration"
+	return 1
+    fi
+
+    return 0
+}
+
+clean()
+{
+    cache="/var/cache/lxc/ubuntu"
+
+    if [ ! -e $cache ]; then
+	exit 0
+    fi
+
+    # lock, so we won't purge while someone is creating a repository
+    (
+	flock -n -x 200
+	if [ $? != 0 ]; then
+	    echo "Cache repository is busy."
+	    exit 1
+	fi
+
+	echo -n "Purging the download cache..."
+	rm --preserve-root --one-file-system -rf $cache && echo "Done." || exit 1
+	exit 0
+
+    ) 200>/var/lock/subsys/lxc
+}
+
+usage()
+{
+    cat <<EOF
+$1 -h|--help -p|--path=<path> --clean
+EOF
+    return 0
+}
+
+options=$(getopt -o hp:n:c -l help,path:,name:,clean -- "$@")
+if [ $? -ne 0 ]; then
+    usage $(basename $0)
+    exit 1
+fi
+eval set -- "$options"
+
+while true
+do
+    case "$1" in
+	-h|--help)      usage $0 && exit 0;;
+	-p|--path)      path=$2; shift 2;;
+	-n|--name)      name=$2; shift 2;;
+	-c|--clean)     clean=$2; shift 2;;
+	--)             shift 1; break ;;
+        *)              break ;;
+    esac
+done
+
+if [ ! -z "$clean" -a -z "$path" ]; then
+    clean || exit 1
+    exit 0
+fi
+
+type debootstrap
+if [ $? -ne 0 ]; then
+    echo "'debootstrap' command is missing"
+    exit 1
+fi
+
+if [ -z "$path" ]; then
+    echo "'path' parameter is required"
+    exit 1
+fi
+
+if [ "$(id -u)" != "0" ]; then
+    echo "This script should be run as 'root'"
+    exit 1
+fi
+
+rootfs=$path/rootfs
+
+install_ubuntu $rootfs
+if [ $? -ne 0 ]; then
+    echo "failed to install ubuntu"
+    exit 1
+fi
+
+configure_ubuntu $rootfs $name
+if [ $? -ne 0 ]; then
+    echo "failed to configure ubuntu for a container"
+    exit 1
+fi
+
+copy_configuration $path $rootfs $name
+if [ $? -ne 0 ]; then
+    echo "failed write configuration file"
+    exit 1
+fi
+
+if [ ! -z $clean ]; then
+    clean || exit 1
+    exit 0
+fi