fast_food 0.1.0

data/chef/cookbooks/mysql/recipes/server.rb

@@ -0,0 +1,221 @@
+#
+# Cookbook Name:: mysql
+# Recipe:: default
+#
+# Copyright 2008-2011, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+::Chef::Recipe.send(:include, Opscode::OpenSSL::Password)
+
+include_recipe "mysql::client"
+
+if Chef::Config[:solo]
+  missing_attrs = %w{
+    server_debian_password server_root_password server_repl_password
+  }.select do |attr|
+    node["mysql"][attr].nil?
+  end.map { |attr| "node['mysql']['#{attr}']" }
+
+  if !missing_attrs.empty?
+    Chef::Application.fatal!([
+        "You must set #{missing_attrs.join(', ')} in chef-solo mode.",
+        "For more information, see https://github.com/opscode-cookbooks/mysql#chef-solo-note"
+      ].join(' '))
+  end
+else
+  # generate all passwords
+  node.set_unless['mysql']['server_debian_password'] = secure_password
+  node.set_unless['mysql']['server_root_password']   = secure_password
+  node.set_unless['mysql']['server_repl_password']   = secure_password
+  node.save
+end
+
+if platform_family?(%w{debian})
+
+  directory "/var/cache/local/preseeding" do
+    owner "root"
+    group node['mysql']['root_group']
+    mode 0755
+    recursive true
+  end
+
+  execute "preseed mysql-server" do
+    command "debconf-set-selections /var/cache/local/preseeding/mysql-server.seed"
+    action :nothing
+  end
+
+  template "/var/cache/local/preseeding/mysql-server.seed" do
+    source "mysql-server.seed.erb"
+    owner "root"
+    group node['mysql']['root_group']
+    mode "0600"
+    notifies :run, "execute[preseed mysql-server]", :immediately
+  end
+
+  template "#{node['mysql']['conf_dir']}/debian.cnf" do
+    source "debian.cnf.erb"
+    owner "root"
+    group node['mysql']['root_group']
+    mode "0600"
+  end
+
+end
+
+if platform_family?('windows')
+  package_file = node['mysql']['package_file']
+
+  remote_file "#{Chef::Config[:file_cache_path]}/#{package_file}" do
+    source node['mysql']['url']
+    not_if { File.exists? "#{Chef::Config[:file_cache_path]}/#{package_file}" }
+  end
+
+  windows_package node['mysql']['server']['packages'].first do
+    source "#{Chef::Config[:file_cache_path]}/#{package_file}"
+  end
+
+  def package(*args, &blk)
+    windows_package(*args, &blk)
+  end
+end
+
+node['mysql']['server']['packages'].each do |package_name|
+  package package_name do
+    action :install
+    notifies :start, "service[mysql]", :immediately
+  end
+end
+
+unless platform_family?(%w{mac_os_x})
+
+  [File.dirname(node['mysql']['pid_file']),
+    File.dirname(node['mysql']['tunable']['slow_query_log']),
+    node['mysql']['confd_dir'],
+    node['mysql']['confd_dir'],
+    node['mysql']['log_dir'],
+    node['mysql']['data_dir']].each do |directory_path|
+    directory directory_path do
+      owner "mysql" unless platform? 'windows'
+      group "mysql" unless platform? 'windows'
+      action :create
+      recursive true
+    end
+  end
+
+  if platform_family? 'windows'
+    require 'win32/service'
+
+    windows_path node['mysql']['bin_dir'] do
+      action :add
+    end
+
+    windows_batch "install mysql service" do
+      command "\"#{node['mysql']['bin_dir']}\\mysqld.exe\" --install #{node['mysql']['service_name']}"
+      not_if { Win32::Service.exists?(node['mysql']['service_name']) }
+    end
+  end
+
+  skip_federated = case node['platform']
+                   when 'fedora', 'ubuntu', 'amazon'
+                     true
+                   when 'centos', 'redhat', 'scientific'
+                     node['platform_version'].to_f < 6.0
+                   else
+                     false
+                   end
+end
+
+# Homebrew has its own way to do databases
+if platform_family?(%w{mac_os_x})
+  execute "mysql-install-db" do
+    command "mysql_install_db --verbose --user=`whoami` --basedir=\"$(brew --prefix mysql)\" --datadir=#{node['mysql']['data_dir']} --tmpdir=/tmp"
+    environment('TMPDIR' => nil)
+    action :run
+    creates "#{node['mysql']['data_dir']}/mysql"
+  end
+else
+  execute 'mysql-install-db' do
+    command "mysql_install_db"
+    action :run
+    not_if { File.exists?(node['mysql']['data_dir'] + '/mysql/user.frm') }
+  end
+
+  service "mysql" do
+    service_name node['mysql']['service_name']
+    if node['mysql']['use_upstart']
+      provider Chef::Provider::Service::Upstart
+    end
+    supports :status => true, :restart => true, :reload => true
+    action :enable
+  end
+end
+
+# set the root password for situations that don't support pre-seeding.
+# (eg. platforms other than debian/ubuntu & drop-in mysql replacements)
+execute "assign-root-password" do
+  command "\"#{node['mysql']['mysqladmin_bin']}\" -u root password \"#{node['mysql']['server_root_password']}\""
+  action :run
+  only_if "\"#{node['mysql']['mysql_bin']}\" -u root -e 'show databases;'"
+end
+
+unless platform_family?(%w{mac_os_x})
+  grants_path = node['mysql']['grants_path']
+
+  begin
+    t = resources("template[#{grants_path}]")
+  rescue
+    Chef::Log.info("Could not find previously defined grants.sql resource")
+    t = template grants_path do
+      source "grants.sql.erb"
+      owner "root" unless platform_family? 'windows'
+      group node['mysql']['root_group'] unless platform_family? 'windows'
+      mode "0600"
+      action :create
+    end
+  end
+
+  if platform_family? 'windows'
+    windows_batch "mysql-install-privileges" do
+      command "\"#{node['mysql']['mysql_bin']}\" -u root #{node['mysql']['server_root_password'].empty? ? '' : '-p' }\"#{node['mysql']['server_root_password']}\" < \"#{grants_path}\""
+      action :nothing
+      subscribes :run, resources("template[#{grants_path}]"), :immediately
+    end
+  else
+    execute "mysql-install-privileges" do
+      command %Q["#{node['mysql']['mysql_bin']}" -u root #{node['mysql']['server_root_password'].empty? ? '' : '-p' }"#{node['mysql']['server_root_password']}" < "#{grants_path}"]
+      action :nothing
+      subscribes :run, resources("template[#{grants_path}]"), :immediately
+    end
+  end
+
+  template "#{node['mysql']['conf_dir']}/my.cnf" do
+    source "my.cnf.erb"
+    owner "root" unless platform? 'windows'
+    group node['mysql']['root_group'] unless platform? 'windows'
+    mode "0644"
+    case node['mysql']['reload_action']
+    when 'restart'
+      notifies :restart, "service[mysql]", :immediately
+    when 'reload'
+      notifies :reload, "service[mysql]", :immediately
+    else
+      Chef::Log.info "my.cnf updated but mysql.reload_action is #{node['mysql']['reload_action']}. No action taken."
+    end
+    variables :skip_federated => skip_federated
+  end
+
+  service "mysql" do
+    action :start
+  end
+end

data/chef/cookbooks/mysql/recipes/server_ec2.rb

@@ -0,0 +1,51 @@
+#
+# Cookbook Name:: mysql
+# Recipe:: default
+#
+# Copyright 2008-2009, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+
+if (node.attribute?('ec2') && ! FileTest.directory?(node['mysql']['ec2_path']))
+
+  service "mysql" do
+    action :stop
+  end
+
+  execute "install-mysql" do
+    command "mv #{node['mysql']['data_dir']} #{node['mysql']['ec2_path']}"
+    not_if do FileTest.directory?(node['mysql']['ec2_path']) end
+  end
+
+  [node['mysql']['ec2_path'], node['mysql']['data_dir']].each do |dir|
+    directory dir do
+      owner "mysql"
+      group "mysql"
+    end
+  end
+
+  mount node['mysql']['data_dir'] do
+    device node['mysql']['ec2_path']
+    fstype "none"
+    options "bind,rw"
+    action [:mount, :enable]
+  end
+
+  service "mysql" do
+    action :start
+  end
+
+end
+

data/chef/cookbooks/mysql/templates/default/debian.cnf.erb

@@ -0,0 +1,12 @@
+[client]
+host     = localhost
+user     = debian-sys-maint
+password = <%= node['mysql']['server_debian_password'] %>
+socket   = <%= node['mysql']['socket'] %>
+
+[mysql_upgrade]
+host     = localhost
+user     = debian-sys-maint
+password = <%= node['mysql']['server_debian_password'] %>
+socket   = <%= node['mysql']['socket'] %>
+basedir  = /usr

data/chef/cookbooks/mysql/templates/default/grants.sql.erb

@@ -0,0 +1,15 @@
+# Generated by Chef for <%= node['hostname'] %>.
+# Local modifications will be overwritten.
+
+<% case node['platform_family'] -%>
+<% when "debian" -%>
+GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, RELOAD, SHUTDOWN, PROCESS, FILE, REFERENCES, INDEX, ALTER, SHOW DATABASES, SUPER, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, REPLICATION SLAVE, REPLICATION CLIENT ON *.* TO 'debian-sys-maint'@'localhost' IDENTIFIED BY '<%= node['mysql']['server_debian_password'] %>' WITH GRANT OPTION;
+<% end -%>
+# Grant replication for a slave user.
+GRANT REPLICATION SLAVE ON *.* TO 'repl'@'%' identified by '<%= node['mysql']['server_repl_password'] %>';
+
+# Set the server root password. This should be preseeded by the package installation.
+<% if node['mysql']['allow_remote_root'] -%>
+GRANT ALL ON *.* TO 'root'@'%' IDENTIFIED BY '<%= node['mysql']['server_root_password'] %>' WITH GRANT OPTION;
+<% end -%>
+SET PASSWORD FOR 'root'@'localhost' = PASSWORD('<%= node['mysql']['server_root_password'] %>');

data/chef/cookbooks/mysql/templates/default/my.cnf.erb

@@ -0,0 +1,312 @@
+#
+# Generated by Chef for <%= node['hostname'] %>
+#
+# Local modifications will be overwritten.
+#
+# The MySQL database server configuration file.
+#
+# You can copy this to one of:
+# - "/etc/mysql/my.cnf" to set global options,
+# - "~/.my.cnf" to set user-specific options.
+#
+# One can use all long options that the program supports.
+# Run program with --help to get a list of available options and with
+# --print-defaults to see which it would actually understand and use.
+#
+# For explanations see
+# http://dev.mysql.com/doc/mysql/en/server-system-variables.html
+
+# This will be passed to all mysql clients
+# It has been reported that passwords should be enclosed with ticks/quotes
+# escpecially if they contain "#" chars...
+# Remember to edit /etc/mysql/debian.cnf when changing the socket location.
+[client]
+port            = <%= node['mysql']['port'] %>
+socket          = <%= node['mysql']['socket'] %>
+
+# Here is entries for some specific programs
+# The following values assume you have at least 32M ram
+
+# This was formally known as [safe_mysqld]. Both versions are currently parsed.
+[mysqld_safe]
+socket          = <%= node['mysql']['socket'] %>
+nice            = <%= node['mysql']['nice'] %>
+
+[mysqld]
+#
+# * Basic Settings
+#
+
+#
+# * IMPORTANT
+#   If you make changes to these settings and your system uses apparmor, you may
+#   also need to also adjust /etc/apparmor.d/usr.sbin.mysqld.
+#
+
+user            = mysql
+pid-file        = <%= node['mysql']['pid_file'] %>
+socket          = <%= node['mysql']['socket'] %>
+port            = <%= node['mysql']['port'] %>
+basedir         = <%= node['mysql']['basedir'] %>
+datadir         = <%= node['mysql']['data_dir'] %>
+tmpdir          = <%= node['mysql']['tmpdir'].join(':') %>
+skip-external-locking
+<%- if node['mysql']['tunable']['skip-name-resolve'] %>
+skip-name-resolve
+<%- end %>
+
+# Charset and Collation
+character-set-server = <%= node['mysql']['tunable']['character-set-server'] %>
+collation-server     = <%= node['mysql']['tunable']['collation-server'] %>
+<%- if node['mysql']['tunable']['event_scheduler'] %>
+event_scheduler      = <%= node['mysql']['tunable']['event_scheduler'] %>
+<%- end %>
+<%- if node['mysql']['tunable']['skip-character-set-client-handshake'] %>
+skip-character-set-client-handshake
+<%- end %>
+
+#
+# Instead of skip-networking the default is now to listen only on
+# localhost which is more compatible and is not less secure.
+bind-address            = <%= node['mysql']['bind_address'] %>
+#
+# * Fine Tuning
+#
+key_buffer              = <%= node['mysql']['tunable']['key_buffer'] %>
+max_allowed_packet      = <%= node['mysql']['tunable']['max_allowed_packet'] %>
+thread_stack            = <%= node['mysql']['tunable']['thread_stack'] %>
+thread_cache_size       = <%= node['mysql']['tunable']['thread_cache_size'] %>
+sort_buffer_size        = <%= node['mysql']['tunable']['sort_buffer_size'] %>
+read_buffer_size        = <%= node['mysql']['tunable']['read_buffer_size'] %>
+read_rnd_buffer_size    = <%= node['mysql']['tunable']['read_rnd_buffer_size'] %>
+join_buffer_size        = <%= node['mysql']['tunable']['join_buffer_size'] %>
+
+auto-increment-increment = <%= node['mysql']['auto-increment-increment'] %>
+auto-increment-offset    = <%= node['mysql']['auto-increment-offset'] %>
+
+# This replaces the startup script and checks MyISAM tables if needed
+# the first time they are touched
+myisam-recover          = BACKUP
+max_connections         = <%= node['mysql']['tunable']['max_connections'] %>
+max_connect_errors      = <%= node['mysql']['tunable']['max_connect_errors'] %>
+concurrent_insert       = <%= node['mysql']['tunable']['concurrent_insert'] %>
+connect_timeout         = <%= node['mysql']['tunable']['connect_timeout'] %>
+wait_timeout            = <%= node['mysql']['tunable']['wait_timeout'] %>
+net_read_timeout        = <%= node['mysql']['tunable']['net_read_timeout'] %>
+net_write_timeout       = <%= node['mysql']['tunable']['net_write_timeout'] %>
+back_log                = <%= node['mysql']['tunable']['back_log'] %>
+table_cache             = <%= node['mysql']['tunable']['table_cache'] %>
+<%- if node['mysql']['tunable']['table_open_cache'] %>
+table_open_cache        = <%= node['mysql']['tunable']['table_open_cache'] %>
+<%- end %>
+tmp_table_size          = <%= node['mysql']['tunable']['tmp_table_size'] %>
+max_heap_table_size     = <%= node['mysql']['tunable']['max_heap_table_size'] %>
+bulk_insert_buffer_size = <%= node['mysql']['tunable']['bulk_insert_buffer_size'] %>
+open-files-limit        = <%= node['mysql']['tunable']['open-files-limit'] %>
+open-files              = <%= node['mysql']['tunable']['open-files'] %>
+
+# Default Table Settings
+<%- if node['mysql']['tunable']['sql_mode'] %>
+sql_mode                = "<%= node['mysql']['tunable']['sql_mode'] %>"
+<%- end %>
+
+#
+# * Query Cache Configuration
+#
+query_cache_limit       = <%= node['mysql']['tunable']['query_cache_limit'] %>
+query_cache_size        = <%= node['mysql']['tunable']['query_cache_size'] %>
+#
+# * Logging
+#
+# Both location gets rotated by the cronjob.
+# Be aware that this log type is a performance killer.
+#log            = /var/log/mysql/mysql.log
+#
+# Error logging goes to syslog. This is a Debian improvement :)
+<%- if node['mysql']['tunable']['log_error'] %>
+log_error = <%= node['mysql']['tunable']['log_error'] %>
+<%- end %>
+<%- if node['mysql']['tunable']['log_warnings'] %>
+log_warnings
+<%- end %>
+#
+# * Replication
+#
+read_only = <%= node['mysql']['read_only'] %>
+
+
+#
+# Here you can see queries with especially long duration
+<%- if node['mysql']['version'].to_f >= 5.5 %>
+slow_query_log          = <%= node['mysql']['tunable']['slow_query_log'] %>
+<% else %>
+log_slow_queries        = <%= node['mysql']['tunable']['slow_query_log'] %>
+<% end %>
+
+long_query_time         = <%= node['mysql']['tunable']['long_query_time'] %>
+<%- if node['mysql']['tunable']['log_queries_not_using_index'] and node['mysql']['slow_query_log']  %>
+log-queries-not-using-indexes
+<%- end %>
+#
+# The following can be used as easy to replay backup logs or for replication.
+# note: if you are setting up a replication slave, see README.Debian about
+#       other settings you may need to change.
+<%- if node['mysql']['tunable']['server_id'] %>
+server-id = <%= node['mysql']['tunable']['server_id'] %>
+<% end %>
+<%- if node['mysql']['tunable']['binlog_format'] %>
+
+binlog_format = <%= node['mysql']['tunable']['binlog_format'] %>
+
+<%- end %>
+<%- if node['mysql']['tunable']['log_bin'] %>
+log_bin = <%= node['mysql']['tunable']['log_bin'] %>
+<%- if node['mysql']['tunable']['log_bin'] %>
+binlog_format           = <%= node['mysql']['tunable']['binlog_format'] %>
+<%- end %>
+log_slave_updates       = <%= node['mysql']['tunable']['log_slave_updates'] %>
+<%- end %>
+<%- if node['mysql']['tunable']['log_bin_trust_function_creators'] %>
+log_bin_trust_function_creators
+<%- end %>
+expire_logs_days        = <%= node['mysql']['tunable']['expire_logs_days'] %>
+max_binlog_size         = <%= node['mysql']['tunable']['max_binlog_size'] %>
+binlog_cache_size       = <%= node['mysql']['tunable']['binlog_cache_size'] %>
+#binlog_do_db           = include_database_name
+#binlog_ignore_db       = include_database_name
+<%- if node['mysql']['tunable']['relay_log'] %>
+relay_log               = <%= node['mysql']['tunable']['relay_log'] %>
+<%- end %>
+<%- if node['mysql']['tunable']['relay_log_index'] %>
+relay_log_index         = <%= node['mysql']['tunable']['relay_log_index'] %>
+<%- end %>
+
+sync_binlog             = <%= node['mysql']['tunable']['sync_binlog'] %>
+<%- if node['mysql']['tunable']['skip_slave_start'] %>
+skip_slave_start
+<%- end %>
+<%- if node['mysql']['tunable']['read_only'] %>
+read_only = 1
+<%- end %>
+
+<%- if node['mysql']['tunable']['transaction-isolation'] %>
+transaction-isolation = <%= node['mysql']['tunable']['transaction-isolation'] %>
+<%- end %>
+
+#
+# * InnoDB
+#
+# InnoDB is enabled by default with a 10MB datafile in /var/lib/mysql/.
+# Read the manual for more InnoDB related options. There are many!
+# You might want to disable InnoDB to shrink the mysqld process by circa 100MB.
+#skip-innodb
+
+<%- if node["mysql"]["version"].to_f >= 5.5 %>
+innodb_write_io_threads         = <%= node['mysql']['tunable']['innodb_write_io_threads'] %>
+innodb_io_capacity              = <%= node['mysql']['tunable']['innodb_io_capacity'] %>
+innodb_read_io_threads          = <%= node['mysql']['tunable']['innodb_read_io_threads'] %>
+innodb_buffer_pool_instances    = <%= node['mysql']['tunable']['innodb_buffer_pool_instances'] %>     
+<%- end %>
+
+## InnoDB Plugin Independent Settings
+innodb_data_home_dir            = <%= node['mysql']['data_dir']  %>
+innodb_log_group_home_dir       = <%= node['mysql']['log_dir']  %>
+<%- if node['mysql']['log_files_in_group'] %>
+innodb_log_files_in_group       = <%= node['mysql']['log_files_in_group'] %>
+<%- end %>
+
+<%- if node['mysql']['innodb_status_file'] %>
+innodb_status_file
+<%- end %>
+<%- if node['mysql']['tunable']['innodb_file_per_table'] %>
+innodb_file_per_table
+<%- end %>
+innodb_table_locks              = <%= node['mysql']['tunable']['innodb_table_locks'] %>
+innodb_lock_wait_timeout        = <%= node['mysql']['tunable']['innodb_lock_wait_timeout'] %>
+innodb_thread_concurrency       = <%= node['mysql']['tunable']['innodb_thread_concurrency'] %>
+innodb_commit_concurrency       = <%= node['mysql']['tunable']['innodb_commit_concurrency'] %>
+innodb_support_xa               = <%= node['mysql']['tunable']['innodb_support_xa'] %>
+<%- if node['mysql']['tunable']['skip-innodb-doublewrite'] %>
+skip-innodb-doublewrite
+<%- end %>
+
+innodb_buffer_pool_size = <%= node['mysql']['tunable']['innodb_buffer_pool_size'] %>
+innodb_log_file_size    = <%= node['mysql']['tunable']['innodb_log_file_size'] %>
+innodb_additional_mem_pool_size = <%= node['mysql']['tunable']['innodb_additional_mem_pool_size'] %>
+innodb_data_file_path   = <%= node['mysql']['tunable']['innodb_data_file_path'] %>
+innodb_file_per_table
+innodb_flush_log_at_trx_commit = <%= node['mysql']['tunable']['innodb_flush_log_at_trx_commit'] %>
+<%- if node['mysql']['tunable']['innodb_flush_method'] %>
+innodb_flush_method     = <%= node['mysql']['tunable']['innodb_flush_method'] %>
+<%- end %>
+innodb_log_buffer_size  = <%= node['mysql']['tunable']['innodb_log_buffer_size'] %>
+<%- if node['mysql']['tunable']['innodb_adaptive_flushing'] %>
+innodb_adaptive_flushing  = <%= node['mysql']['tunable']['innodb_adaptive_flushing'] %>
+<%- end %>
+
+<% if @skip_federated %>
+#
+# * Federated
+#
+# The FEDERATED storage engine is disabled since 5.0.67 by default in the .cnf files
+# shipped with MySQL distributions (my-huge.cnf, my-medium.cnf, and so forth).
+#
+skip-federated
+<% end %>
+#
+# * Security Features
+#
+# Read the manual, too, if you want chroot!
+# chroot = /var/lib/mysql/
+#
+# For generating SSL certificates I recommend the OpenSSL GUI "tinyca".
+#
+# ssl-ca=/etc/mysql/cacert.pem
+# ssl-cert=/etc/mysql/server-cert.pem
+# ssl-key=/etc/mysql/server-key.pem
+
+[mysqldump]
+quick
+quote-names
+max_allowed_packet      = <%= node['mysql']['tunable']['max_allowed_packet'] %>
+
+[mysql]
+#no-auto-rehash # faster start of mysql but no tab completition
+
+[isamchk]
+key_buffer                = <%= node['mysql']['tunable']['max_allowed_packet'] %>
+
+myisam_sort_buffer_size   = <%= node['mysql']['tunable']['myisam_sort_buffer_size'] %>
+myisam_max_sort_file_size = <%= node['mysql']['tunable']['myisam_max_sort_file_size'] %>
+myisam_repair_threads     = <%= node['mysql']['tunable']['myisam_repair_threads'] %>
+myisam_recover            = <%= node['mysql']['tunable']['myisam_recover'] %>
+
+#
+# * NDB Cluster
+#
+# See /usr/share/doc/mysql-server-*/README.Debian for more information.
+#
+# The following configuration is read by the NDB Data Nodes (ndbd processes)
+# not from the NDB Management Nodes (ndb_mgmd processes).
+#
+# [MYSQL_CLUSTER]
+# ndb-connectstring=127.0.0.1
+
+<% case node['platform_family'] -%>
+<% when "rhel", "fedora", "suse" -%>
+#
+# * BerkeleyDB
+#
+# Using BerkeleyDB is now discouraged as its support will cease in 5.1.12.
+skip-bdb
+# Default to using old password format for compatibility with mysql 3.x
+# clients (those using the mysqlclient10 compatibility package).
+old_passwords           = <%= node['mysql']['old_passwords'] %>
+
+<% else -%>
+#
+# * IMPORTANT: Additional settings that can override those from this file!
+#   The files must end with '.cnf', otherwise they'll be ignored.
+#
+!includedir <%= node['mysql']['confd_dir'] %>/
+<% end -%>

data/chef/cookbooks/mysql/templates/default/mysql-server.seed.erb

@@ -0,0 +1,10 @@
+mysql-server-5.0        mysql-server/root_password_again        select <%= node['mysql']['server_root_password'] %>
+mysql-server-5.0        mysql-server/root_password      select <%= node['mysql']['server_root_password'] %>
+mysql-server-5.0        mysql-server-5.0/really_downgrade       boolean false
+mysql-server-5.0        mysql-server-5.0/need_sarge_compat      boolean false
+mysql-server-5.0        mysql-server-5.0/start_on_boot  boolean true
+mysql-server-5.0        mysql-server/error_setting_password     boolean false
+mysql-server-5.0        mysql-server-5.0/nis_warning    note
+mysql-server-5.0        mysql-server-5.0/postrm_remove_databases        boolean false
+mysql-server-5.0        mysql-server/password_mismatch  boolean false
+mysql-server-5.0        mysql-server-5.0/need_sarge_compat_done boolean true

data/chef/cookbooks/mysql/templates/default/port_mysql.erb

@@ -0,0 +1,3 @@
+# MySQL
+-A FWR -p tcp -m tcp --dport 3306 -j ACCEPT
+-A FWR -p udp -m udp --dport 3306 -j ACCEPT