fast_food 0.1.0

data/chef/cookbooks/apache2/definitions/apache_site.rb

@@ -0,0 +1,43 @@
+#
+# Cookbook Name:: apache2
+# Definition:: apache_site
+#
+# Copyright 2008-2009, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+define :apache_site, :enable => true do
+  include_recipe "apache2"
+
+  if params[:enable]
+    execute "a2ensite #{params[:name]}" do
+      command "/usr/sbin/a2ensite #{params[:name]}"
+      notifies :restart, resources(:service => "apache2")
+      not_if do
+        ::File.symlink?("#{node['apache']['dir']}/sites-enabled/#{params[:name]}") or
+          ::File.symlink?("#{node['apache']['dir']}/sites-enabled/000-#{params[:name]}")
+      end
+      only_if do ::File.exists?("#{node['apache']['dir']}/sites-available/#{params[:name]}") end
+    end
+  else
+    execute "a2dissite #{params[:name]}" do
+      command "/usr/sbin/a2dissite #{params[:name]}"
+      notifies :restart, resources(:service => "apache2")
+      only_if do
+        ::File.symlink?("#{node['apache']['dir']}/sites-enabled/#{params[:name]}") or
+          ::File.symlink?("#{node['apache']['dir']}/sites-enabled/000-#{params[:name]}")
+      end
+    end
+  end
+end

data/chef/cookbooks/apache2/definitions/web_app.rb

@@ -0,0 +1,49 @@
+#
+# Cookbook Name:: apache2
+# Definition:: web_app
+#
+# Copyright 2008-2009, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+define :web_app, :template => "web_app.conf.erb", :enable => true do
+  
+  application_name = params[:name]
+
+  include_recipe "apache2"
+  include_recipe "apache2::mod_rewrite"
+  include_recipe "apache2::mod_deflate"
+  include_recipe "apache2::mod_headers"
+  
+  template "#{node['apache']['dir']}/sites-available/#{application_name}.conf" do
+    source params[:template]
+    owner "root"
+    group node['apache']['root_group']
+    mode 0644
+    if params[:cookbook]
+      cookbook params[:cookbook]
+    end
+    variables(
+      :application_name => application_name,
+      :params => params
+    )
+    if ::File.exists?("#{node['apache']['dir']}/sites-enabled/#{application_name}.conf")
+      notifies :reload, resources(:service => "apache2"), :delayed
+    end
+  end
+  
+  apache_site "#{params[:name]}.conf" do
+    enable params[:enable]
+  end
+end

data/chef/cookbooks/apache2/files/default/apache2_module_conf_generate.pl

@@ -0,0 +1,41 @@
+#!/usr/bin/perl
+
+=begin
+
+Generates Ubuntu style module.load files.
+ 
+./apache2_module_conf_generate.pl /usr/lib64/httpd/modules /etc/httpd/mods-available
+
+ARGV[0] is the apache modules directory, ARGV[1] is where you want 'em.
+
+=cut
+
+use File::Find;
+
+use strict;
+use warnings;
+
+die "Must have '/path/to/modules' and '/path/to/modules.load'"
+  unless $ARGV[0] && $ARGV[1];
+
+find(
+  {
+    wanted => sub {
+      return 1 if $File::Find::name !~ /\.so$/;
+      my $modfile = $_;
+      $modfile =~ /(lib|mod_)(.+)\.so$/;
+      my $modname  = $2;
+      my $filename = "$ARGV[1]/$modname.load";
+      unless ( -f $filename ) {
+        open( FILE, ">", $filename ) or die "Cannot open $filename";
+        print FILE "LoadModule " . $modname . "_module $File::Find::name\n";
+        close(FILE);
+      }
+    },
+    follow => 1,
+  },
+  $ARGV[0]
+);
+
+exit 0;
+

data/chef/cookbooks/apache2/files/default/tests/minitest/default_test.rb

@@ -0,0 +1,64 @@
+require File.expand_path('../helpers', __FILE__)
+
+describe 'apache2::default' do
+  include Helpers::Apache
+  it 'installs apache' do
+    package(node['apache']['package']).must_be_installed
+  end
+  it 'starts apache' do
+    apache_service.must_be_running
+  end
+  it 'enables apache' do
+    apache_service.must_be_enabled
+  end
+  it 'creates the conf.d directory' do
+    directory("#{node['apache']['dir']}/conf.d").must_exist.with(:mode, "755")
+  end
+  it 'creates the logs directory' do
+    directory(node['apache']['log_dir']).must_exist
+  end
+  it 'enables the default site' do
+    file("#{node['apache']['dir']}/sites-enabled/000-default").must_exist
+    file("#{node['apache']['dir']}/sites-available/default").must_exist
+  end
+  it 'ensures the debian-style apache module scripts are present' do
+    %w{a2ensite a2dissite a2enmod a2dismod}.each do |mod_script|
+      file("/usr/sbin/#{mod_script}").must_exist
+    end
+  end
+  it 'reports server name only, not detailed version info' do
+    assert_match(/^ServerTokens Prod *$/, File.read("#{node['apache']['dir']}/conf.d/security"))
+  end
+  it 'listens on port 80' do
+    apache_configured_ports.must_include(80)
+  end
+  it 'only listens on port 443 when SSL is enabled' do
+    unless ran_recipe?('apache2::mod_ssl')
+      apache_configured_ports.wont_include(443)
+    end
+  end
+  it 'reports server name only, not detailed version info' do
+    file("#{node['apache']['dir']}/conf.d/security").must_match(/^ServerTokens Prod *$/)
+  end
+  it 'listens on port 80' do
+    apache_configured_ports.must_include(80)
+  end
+  it 'only listens on port 443 when SSL is enabled' do
+    unless ran_recipe?('apache2::mod_ssl')
+      apache_configured_ports.wont_include(443)
+    end
+  end
+  describe 'centos' do
+    it 'ensures no modules are loaded in conf.d' do
+      Dir["#{node['apache']['dir']}/conf.d/*"].each do |f|
+        file(f).wont_include 'LoadModule'
+      end
+    end
+  end
+  describe 'configuration' do
+    it { config.must_include '# Generated by Chef' }
+    it { config.must_include %Q{ServerRoot "#{node['apache']['dir']}"} }
+    it { config.must_include "Include #{node['apache']['dir']}/conf.d/" }
+    it { apache_config_parses? }
+  end
+end

data/chef/cookbooks/apache2/files/default/tests/minitest/helpers.rb

@@ -0,0 +1,36 @@
+module Helpers
+  module Apache
+    include MiniTest::Chef::Assertions
+    include MiniTest::Chef::Context
+    include MiniTest::Chef::Resources
+
+    def apache_config_parses?
+      %x{#{node['apache']['binary']} -t}
+      $?.success?
+    end
+    def apache_configured_ports
+      port_config = File.read("#{node['apache']['dir']}/ports.conf")
+      port_config.scan(/^Listen ([0-9]+)/).flatten.map{|p| p.to_i}
+    end
+    def apache_enabled_modules
+      Dir["#{node['apache']['dir']}/mods-enabled/*.load"].map{|s| File.basename(s, '.load')}.sort
+    end
+    def apache_service
+      service(case node['platform']
+        when "debian","ubuntu" then "apache2"
+        when "freebsd" then "apache22"
+        else "httpd"
+      end)
+    end
+    def config
+      file(case node['platform']
+        when "debian","ubuntu" then "#{node['apache']['dir']}/apache2.conf"
+        when "freebsd" then "#{node['apache']['dir']}/httpd.conf"
+        else "#{node['apache']['dir']}/conf/httpd.conf"
+      end)
+    end
+    def ran_recipe?(recipe)
+      node.run_state[:seen_recipes].keys.include?(recipe)
+    end
+  end
+end

data/chef/cookbooks/apache2/files/default/tests/minitest/mod_auth_openid_test.rb

@@ -0,0 +1,25 @@
+require File.expand_path('../helpers', __FILE__)
+require 'pathname'
+
+describe 'apache2::mod_auth_openid' do
+  include Helpers::Apache
+
+  it "installs the opekele library" do
+    lib_dir = Pathname.new(node['apache']['lib_dir']).dirname.to_s
+    file("#{lib_dir}/libopkele.so").must_exist
+  end
+
+  it "does not add the module to httpd.conf" do
+    httpd_config = File.read("#{node['apache']['dir']}/conf/httpd.conf")
+    refute_match /^LoadModule authopenid_module /, httpd_config
+  end
+
+  it "creates a cache directory for the module" do
+    directory(node['apache']['mod_auth_openid']['cache_dir']).must_exist.with(:owner, node['apache']['user'])
+  end
+
+  it "ensures the db file is writable by apache" do
+    file(node['apache']['mod_auth_openid']['dblocation']).must_exist.with(:owner, node['apache']['user']).and(:mode, "644")
+  end
+
+end

data/chef/cookbooks/apache2/files/default/tests/minitest/mod_dav_svn_test.rb

@@ -0,0 +1,16 @@
+require File.expand_path('../helpers', __FILE__)
+
+describe 'apache2::mod_dav_svn' do
+  include Helpers::Apache
+
+  it 'installs mod_dav_svn' do
+    mod_dav_svn = case node['platform']
+      when "centos","redhat","scientific","fedora","suse","amazon"
+        "mod_dav_svn"
+      else
+        "libapache2-svn"
+      end
+    package(mod_dav_svn).must_be_installed
+  end
+
+end

data/chef/cookbooks/apache2/files/default/tests/minitest/mod_perl_test.rb

@@ -0,0 +1,22 @@
+require File.expand_path('../helpers', __FILE__)
+
+describe 'apache2::mod_perl' do
+  include Helpers::Apache
+
+  it 'installs mod_perl' do
+    mod_perl_pkg = case node['platform']
+      when 'debian', 'ubuntu' then 'libapache2-mod-perl2'
+      else 'mod_perl'
+    end
+    package(mod_perl_pkg).must_be_installed
+  end
+
+  it 'installs the apache request library' do
+    req_pkg = case node['platform']
+      when 'debian', 'ubuntu' then 'libapache2-request-perl'
+      else 'perl-libapreq2'
+    end
+    package(req_pkg).must_be_installed
+  end
+
+end

data/chef/cookbooks/apache2/files/default/tests/minitest/mod_php5_test.rb

@@ -0,0 +1,19 @@
+require File.expand_path('../helpers', __FILE__)
+
+describe 'apache2::mod_php5' do
+  include Helpers::Apache
+
+  it 'installs mod_php5' do
+    mod_php_pkg = case node['platform']
+      when 'debian', 'ubuntu' then 'libapache2-mod-php5'
+      else 'php53'
+    end
+    package(mod_php_pkg).must_be_installed
+  end
+
+  it "deletes the stock php config on rhel distributions" do
+    skip unless node.platform?("amazon", "redhat", "centos", "scientific")
+    file("#{node['apache']['dir']}/conf.d/php.conf").wont_exist
+  end
+
+end

data/chef/cookbooks/apache2/files/default/tests/minitest/mod_python_test.rb

@@ -0,0 +1,14 @@
+require File.expand_path('../helpers', __FILE__)
+
+describe 'apache2::mod_python' do
+  include Helpers::Apache
+
+  it 'installs mod_python' do
+    mod_python_pkg = case node['platform']
+      when 'debian', 'ubuntu' then 'libapache2-mod-python'
+      else 'mod_python'
+    end
+    package(mod_python_pkg).must_be_installed
+  end
+
+end

data/chef/cookbooks/apache2/files/default/tests/minitest/mod_ssl_test.rb

@@ -0,0 +1,19 @@
+require File.expand_path('../helpers', __FILE__)
+
+describe 'apache2::mod_ssl' do
+  include Helpers::Apache
+
+  it 'installs the mod_ssl package on RHEL distributions' do
+    skip unless ["redhat", "centos", "scientific", "fedora", "amazon"].include? node.platform
+    package("mod_ssl").must_be_installed
+  end
+
+  it 'does not store SSL config in conf.d' do
+    file("#{node['apache']['dir']}/conf.d/ssl.conf").wont_exist
+  end
+
+  it "is configured to listen on port 443" do
+    apache_configured_ports.must_include(443)
+  end
+
+end

data/chef/cookbooks/apache2/files/default/tests/minitest/mod_wsgi_test.rb

@@ -0,0 +1,14 @@
+require File.expand_path('../helpers', __FILE__)
+
+describe 'apache2::mod_wsgi' do
+  include Helpers::Apache
+
+  it "installs mod_wsgi" do
+    wsgi_pkg = package(case node['platform']
+      when "debian","ubuntu" then "libapache2-mod-wsgi"
+      else "mod_wsgi"
+    end)
+    wsgi_pkg.must_be_installed
+  end
+
+end

data/chef/cookbooks/apache2/files/default/tests/minitest/mod_xsendfile_test.rb

@@ -0,0 +1,14 @@
+require File.expand_path('../helpers', __FILE__)
+
+describe 'apache2::mod_xsendfile' do
+  include Helpers::Apache
+
+  it "installs mod_xsendfile" do
+    sendfile_pkg = package(case node['platform']
+      when "debian","ubuntu" then "libapache2-mod-xsendfile"
+      else "mod_xsendfile"
+    end)
+    sendfile_pkg.must_be_installed
+  end
+
+end

data/chef/cookbooks/apache2/files/default/tests/minitest/modules_test.rb

@@ -0,0 +1,19 @@
+require File.expand_path('../helpers', __FILE__)
+
+# Many of the apache2 cookbook recipes do nothing more than install the module
+# of the same name. Assert that any included recipe that claims to install a
+# module actually does so.
+%w{
+  alias apreq2 auth_basic auth_digest authn_file authnz_ldap authopenid
+  authz_default authz_groupfile authz_host authz_user autoindex cgi dav_fs dav
+  dav_svn deflate dir env expires fcgid headers ldap log_config mime
+  negotiation perl php5 proxy_ajp proxy_balancer proxy_connect proxy_http
+  proxy python rewrite setenvif ssl status wsgi xsendfile
+}.each do |expected_module|
+  describe "apache2::mod_#{expected_module}" do
+    include Helpers::Apache
+    it "installs mod_#{expected_module}" do
+      apache_enabled_modules.must_include expected_module
+    end
+  end
+end