from-scratch 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 5b496c570f495a440506371b464e4533fb5470bb
-  data.tar.gz: 33954a19f5906d5b5c8af4d27cc0f95793084488
+  metadata.gz: 5fecc9619a3c03891cb931d42dbada9d76d11546
+  data.tar.gz: 354a0f61a77ac2a23608afcdfde4eb3966caf491
 SHA512:
-  metadata.gz: c7fdbec146ed46a5ddd7eb85ed9f6888400074903d09484959665a242331490704cf6a17d2e6b728b87de8e7876294b99a5e8a47cd0d7a6ba9a0bb637722a680
-  data.tar.gz: d390f3867386c55f06e2e4ad61c06acbe9c85c24529ac7125583b1fb2fb7b923fc673f6ef85ebd24fb5fd625cd634c18dfbf0c290ddd982647d5b70bd0afa2f4
+  metadata.gz: 38b9f37053254444604c73f57e56bb5d776be4d8ee13e40a86eaf9ce4598aba5c5f49b014b2e7a3a7036ed25db7cce17163f073f536300b87ed19cff31bcd330
+  data.tar.gz: 4f3f887a9d83e37c73fc1f2d7c004c1290c1a2d3512e8afe8afb1ba667fbb87d2930a45479f3b5f7e0cad7eb43333ca727b58728a40eabb9cd13a4db2c6577d1

data/.gitignore

@@ -7,3 +7,4 @@
 /pkg/
 /spec/reports/
 /tmp/
+*.gem

data/Berksfile.lock

@@ -1,4 +1,5 @@
 DEPENDENCIES
+  postgresql
   rvm
     git: git://github.com/fnichol/chef-rvm.git
     revision: 08ec265f277e112a5a2e4b201bd32ddfe1bb968c
@@ -8,12 +9,22 @@ DEPENDENCIES
   user
 
 GRAPH
+  apt (2.9.2)
+  build-essential (2.2.4)
+  chef-sugar (3.1.1)
   chef_gem (0.1.0)
   java (1.35.0)
+  openssl (4.0.0)
+    chef-sugar (>= 0.0.0)
+  postgresql (3.4.20)
+    apt (>= 1.9.0)
+    build-essential (>= 0.0.0)
+    openssl (~> 4.0.0)
   rvm (0.10.1)
     chef_gem (>= 0.0.0)
     java (>= 0.0.0)
   scratchify (0.1.0)
+    postgresql (>= 0.0.0)
     rvm (>= 0.0.0)
     user (>= 0.0.0)
   user (0.4.2)

data/chefignore

@@ -94,6 +94,7 @@ Vagrantfile
 .travis.yml
 
 # Gem files #
+#############
 Gemfile
 Gemfile.lock
 Rakefile

data/cookbooks/apt/CHANGELOG.md

@@ -0,0 +1,248 @@
+apt Cookbook CHANGELOG
+======================
+
+v2.9.2
+-------------------
+- #168 Adding guard to package resource.
+
+v2.9.1
+-------------------
+- Adding package apt-transport-https to default.rb
+
+v2.9.0
+-------------------
+- Add `sensitive` flag for apt\_repositories
+- Enable installation of recommended or suggested packages
+- Tidy up `apt-get update` logic
+- Fixing not_if guard on ruby_block[validate-key #{key}]
+
+v2.8.2 (2015-08-24)
+-------------------
+- Fix removal of apt\_preferences
+
+v2.8.1 (2015-08-18)
+-------------------
+- Handle keyservers as URLs and bare hostnames
+
+v2.8.0 (2015-08-18)
+-------------------
+- Access keyservers on port 80
+- Adds key\_proxy as LWRP attribute for apt\_repository
+- Fix wildcard glob preferences files
+- Fix text output verification for non en\_US locales
+- Quote repo URLs to deal with spaces
+
+v2.7.0 (2015-03-23)
+-------------------
+- Support Debian 8.0
+- Filename verification for LWRPs
+- Support SSL enabled apt repositories
+
+v2.6.1 (2014-12-29)
+-------------------
+- Remove old preference files without .pref extension from previous versions
+
+v2.6.0 (2014-09-09)
+-------------------
+- Always update on first run - check
+- Adding ppa support for apt_repository
+
+v2.5.3 (2014-08-14)
+-------------------
+- #87 - Improve default settings, account for non-linux platforms
+
+v2.5.2 (2014-08-14)
+-------------------
+- Fully restore 2.3.10 behaviour
+
+v2.5.1 (2014-08-14)
+-------------------
+- fix breakage introduced in apt 2.5.0
+
+v2.5.0 (2014-08-12)
+-------------------
+- Add unattended-upgrades recipe
+- Only update the cache for the created repository
+- Added ChefSpec matchers and default_action for resources
+- Avoid cloning resource attributes
+- Minor documentation updates
+
+v2.4.0 (2014-05-15)
+-------------------
+- [COOK-4534]: Add option to update apt cache at compile time
+
+
+v2.3.10 (2014-04-23)
+--------------------
+- [COOK-4512] Bugfix: Use empty PATH if PATH is nil
+
+
+v2.3.8 (2014-02-14)
+-------------------
+### Bug
+- **[COOK-4287](https://tickets.chef.io/browse/COOK-4287)** - Cleanup the Kitchen
+
+
+v2.3.6
+------
+* [COOK-4154] - Add chefspec matchers.rb file to apt cookbook
+* [COOK-4102] - Only index created repository
+
+
+v2.3.6
+------
+* [COOK-4154] - Add chefspec matchers.rb file to apt cookbook
+* [COOK-4102] - Only index created repository
+
+
+v2.3.4
+------
+No change. Version bump for toolchain sanity
+
+
+v2.3.2
+------
+- [COOK-3905] apt-get-update-periodic: configuration for the update period
+- Updating style for rubocops
+- Updating test-kitchen harness
+
+
+v2.3.0
+------
+### Bug
+- **[COOK-3812](https://tickets.chef.io/browse/COOK-3812)** - Add a way to bypass the apt existence check
+
+### Improvement
+- **[COOK-3567](https://tickets.chef.io/browse/COOK-3567)** - Allow users to bypass apt-cache via attributes
+
+
+v2.2.1
+------
+### Improvement
+- **[COOK-664](https://tickets.chef.io/browse/COOK-664)** - Check platform before running apt-specific commands
+
+
+v2.2.0
+------
+### Bug
+- **[COOK-3707](https://tickets.chef.io/browse/COOK-3707)** - multiple nics confuse apt::cacher-client
+
+v2.1.2
+------
+### Improvement
+- **[COOK-3551](https://tickets.chef.io/browse/COOK-3551)** - Allow user to set up a trusted APT repository
+
+v2.1.1
+------
+### Bug
+- **[COOK-1856](https://tickets.chef.io/browse/COOK-1856)** - Match GPG keys without case sensitivity
+
+v2.1.0
+------
+- [COOK-3426]: cacher-ng fails with restrict_environment set to true
+- [COOK-2859]: cacher-client executes out of order
+- [COOK-3052]: Long GPG keys are downloaded on every run
+- [COOK-1856]: apt cookbook should match keys without case sensitivity
+- [COOK-3255]: Attribute name incorrect in README
+- [COOK-3225]: Call use_inline_resources only if defined
+- [COOK-3386]: Cache dir for apt-cacher-ng
+- [COOK-3291]: apt_repository: enable usage of a keyserver on port 80
+- Greatly expanded test coverage with ChefSpec and Test-Kitchen
+
+v2.0.0
+------
+### Bug
+
+- [COOK-2258]: apt: LWRP results in error under why-run mode in apt 1.9.0 cookbook
+
+v1.10.0
+-------
+### Improvement
+
+- [COOK-2885]: Improvements for apt cache server search
+
+### Bug
+
+- [COOK-2441]: Apt recipe broken in new chef version
+- [COOK-2660]: Create Debian 6.0 "squeeze" specific template for
+  apt-cacher-ng
+
+v1.9.2
+------
+- [COOK-2631] - Create Ubuntu 10.04 specific template for apt-cacher-ng
+
+v1.9.0
+------
+- [COOK-2185] - Proxy for apt-key
+- [COOK-2338] - Support pinning by glob() or regexp
+
+v1.8.4
+------
+- [COOK-2171] - Update README to clarify required Chef version: 10.18.0
+  or higher.
+
+v1.8.2
+------
+- [COOK-2112] - need [] around "arch" in sources.list entries
+- [COOK-2171] - fixes a regression in the notification
+
+v1.8.0
+------
+- [COOK-2143] - Allow for a custom cacher-ng port
+- [COOK-2171] - On `apt_repository.run_action(:add)` the source file
+  is not created.
+- [COOK-2184] - apt::cacher-ng, use `cacher_port` attribute in
+  acng.conf
+
+v1.7.0
+------
+- [COOK-2082] - add "arch" parameter to apt_repository LWRP
+
+v1.6.0
+------
+- [COOK-1893] - `apt_preference` use "`package_name`" resource instead of "name"
+- [COOK-1894] - change filename for sources.list.d files
+- [COOK-1914] - Wrong dir permissions for /etc/apt/preferences.d/
+- [COOK-1942] - README.md has wrong name for the keyserver attribute
+- [COOK-2019] - create 01proxy before any other apt-get updates get executed
+
+v1.5.2
+------
+- [COOK-1682] - use template instead of file resource in apt::cacher-client
+- [COOK-1875] - cacher-client should be Environment-aware
+
+V1.5.0
+------
+- [COOK-1500] - Avoid triggering apt-get update
+- [COOK-1548] - Add execute commands for autoclean and autoremove
+- [COOK-1591] - Setting up the apt proxy should leave https
+  connections direct
+- [COOK-1596] - execute[apt-get-update-periodic] never runs
+- [COOK-1762] - create /etc/apt/preferences.d directory
+- [COOK-1776] - apt key check isn't idempotent
+
+v1.4.8
+------
+* Adds test-kitchen support
+- [COOK-1435] - repository lwrp is not idempotent with http key
+
+v1.4.6
+------
+- [COOK-1530] - apt_repository isn't aware of update-success-stamp
+  file (also reverts COOK-1382 patch).
+
+v1.4.4
+------
+- [COOK-1229] - Allow cacher IP to be set manually in non-Chef Solo
+  environments
+- [COOK-1530] - Immediately update apt-cache when sources.list file is dropped off
+
+v1.4.2
+------
+- [COOK-1155] - LWRP for apt pinning
+
+v1.4.0
+------
+- [COOK-889] - overwrite existing repo source files
+- [COOK-921] - optionally use cookbook\_file or remote\_file for key
+- [COOK-1032] - fixes problem with apt repository key installation

data/cookbooks/apt/README.md

@@ -0,0 +1,294 @@
+apt Cookbook
+============
+[![Build Status](https://img.shields.io/travis/chef-cookbooks/apt.svg)][travis]
+[![Cookbook Version](https://img.shields.io/cookbook/v/apt.svg)][cookbook]
+
+[cookbook]: https://community.chef.io/cookbooks/apt
+[travis]: https://travis-ci.org/chef-cookbooks/apt
+
+This cookbook includes recipes to execute apt-get update to ensure the local APT package cache is up to date. There are recipes for managing the apt-cacher-ng caching proxy and proxy clients. It also includes a LWRP for managing APT repositories in /etc/apt/sources.list.d as well as an LWRP for pinning packages via /etc/apt/preferences.d.
+
+
+Requirements
+------------
+**Version 2.0.0+ of this cookbook requires Chef 11.0.0 or later**. If your Chef version is earlier than 11.0.0, use version 1.10.0 of this cookbook.
+
+Version 1.8.2 to 1.10.0 of this cookbook requires **Chef 10.16.4** or later.
+
+If your Chef version is earlier than 10.16.4, use version 1.7.0 of this cookbook.
+
+### Platform
+Please refer to the [TESTING file](TESTING.md) to see the currently (and passing) tested platforms. The release was tested on:
+
+* Ubuntu 10.04
+* Ubuntu 12.04
+* Ubuntu 13.04
+* Debian 7.1
+* Debian 6.0 (have with manual testing)
+
+May work with or without modification on other Debian derivatives.
+
+
+-------
+### default
+This recipe manually updates the timestamp file used to only run `apt-get update` if the cache is more than one day old.
+
+This recipe should appear first in the run list of Debian or Ubuntu nodes to ensure that the package cache is up to date before managing any `package` resources with Chef.
+
+This recipe also sets up a local cache directory for preseeding packages.
+
+**Including the default recipe on a node that does not support apt (such as Windows) results in a noop.**
+
+### cacher-client
+Configures the node to use the `apt-cacher-ng` server as a client.
+
+#### Bypassing the cache
+Occasionally you may come across repositories that do not play nicely when the node is using an `apt-cacher-ng` server. You can configure `cacher-client` to bypass the server and connect directly to the repository with the `cache_bypass` attribute.
+
+To do this, you need to override the `cache_bypass` attribute with an array of repositories, with each array key as the repository URL and value as the protocol to use:
+
+```json
+{
+    "apt": {
+        "cache_bypass": {
+            "URL": "PROTOCOL"
+        }
+    }
+}
+```
+
+For example, to prevent caching and directly connect to the repository at `download.oracle.com` via http:
+
+```json
+{
+    "apt": {
+        "cache_bypass": {
+            "download.oracle.com": "http"
+        }
+    }
+}
+```
+
+### cacher-ng
+Installs the `apt-cacher-ng` package and service so the system can provide APT caching. You can check the usage report at http://{hostname}:3142/acng-report.html.
+
+If you wish to help the `cacher-ng` recipe seed itself, you must now explicitly include the `cacher-client` recipe in your run list **after** `cacher-ng` or you will block your ability to install any packages (ie. `apt-cacher-ng`).
+
+### unattended-upgrades
+
+Installs and configures the `unattended-upgrades` package to provide automatic package updates. This can be configured to upgrade all packages or to just install security updates by setting `['apt']['unattended_upgrades']['allowed_origins']`.
+
+To pull just security updates, you'd set `allowed_origins` to something link `["Ubuntu trusty-security"]` (for Ubuntu trusty) or `["Debian wheezy-security"]` (for Debian wheezy). 
+
+
+Attributes
+----------
+
+### General 
+* `['apt']['compile_time_update']` - force the default recipe to run `apt-get update` at compile time.
+* `['apt']['periodic_update_min_delay']` - minimum delay (in seconds) beetween two actual executions of `apt-get update` by the `execute[apt-get-update-periodic]` resource, default is '86400' (24 hours)
+
+### Caching
+
+* `['apt']['cacher_ipaddress']` - use a cacher server (or standard proxy server) not available via search
+* `['apt']['cacher_interface']` - interface to connect to the cacher-ng service, no default.
+* `['apt']['cacher_port']` - port for the cacher-ng service (either client or server), default is '3142'
+* `['apt']['cacher_ssl_support']` - indicates whether the cacher supports upstream SSL servers, default is 'false'
+* `['apt']['cacher_dir']` - directory used by cacher-ng service, default is '/var/cache/apt-cacher-ng'
+* `['apt']['cacher-client']['restrict_environment']` - restrict your node to using the `apt-cacher-ng` server in your Environment, default is 'false'
+* `['apt']['compiletime']` - force the `cacher-client` recipe to run before other recipes. It forces apt to use the proxy before other recipes run. Useful if your nodes have limited access to public apt repositories. This is overridden if the `cacher-ng` recipe is in your run list. Default is 'false'
+* `['apt']['cache_bypass']` - array of URLs to bypass the cache. Accepts the URL and protocol to  fetch directly from the remote repository and not attempt to cache
+
+### Unattended Upgrades
+
+* `['apt']['unattended_upgrades']['enable']` - enables unattended upgrades, default is false
+* `['apt']['unattended_upgrades']['update_package_lists']` - automatically update package list (`apt-get update`) daily, default is true
+* `['apt']['unattended_upgrades']['allowed_origins']` - array of allowed apt origins from which to pull automatic upgrades, defaults to a guess at the system's main origin and should almost always be overridden
+* `['apt']['unattended_upgrades']['package_blacklist']` - an array of package which should never be automatically upgraded, defaults to none
+* `['apt']['unattended_upgrades']['auto_fix_interrupted_dpkg']` - attempts to repair dpkg state with `dpkg --force-confold --configure -a` if it exits uncleanly, defaults to false (contrary to the unattended-upgrades default)
+* `['apt']['unattended_upgrades']['minimal_steps']` - Split the upgrade into the smallest possible chunks. This makes the upgrade a bit slower but it has the benefit that shutdown while a upgrade is running is possible (with a small delay). Defaults to false.
+* `['apt']['unattended_upgrades']['install_on_shutdown']` - Install upgrades when the machine is shuting down instead of doing it in the background while the machine is running. This will (obviously) make shutdown slower. Defaults to false.
+* `['apt']['unattended_upgrades']['mail']` - Send email to this address for problems or packages upgrades. Defaults to no email.
+* `['apt']['unattended_upgrades']['mail_only_on_error']` - If set, email will only be set on upgrade errors. Otherwise, an email will be sent after each upgrade. Defaults to true.
+* `['apt']['unattended_upgrades']['remove_unused_dependencies']` Do automatic removal of new unused dependencies after the upgrade. Defaults to false.
+* `['apt']['unattended_upgrades']['automatic_reboot']` - Automatically reboots *without confirmation* if a restart is required after the upgrade. Defaults to false.
+* `['apt']['unattended_upgrades']['dl_limit']` - Limits the bandwidth used by apt to download packages. Value given as an integer in kb/sec. Defaults to nil (no limit).
+
+### Configuration for APT
+
+* `['apt']['confd']['install_recommends']` - Consider recommended packages as a dependency for installing. (default: true)
+* `['apt']['confd']['install_suggests']` - Consider suggested packages as a dependency for installing. (default: false)
+
+Libraries
+---------
+There is an `interface_ipaddress` method that returns the IP address for a particular host and interface, used by the `cacher-client` recipe. To enable it on the server use the `['apt']['cacher_interface']` attribute.
+
+Resources/Providers
+-------------------
+### `apt_repository`
+This LWRP provides an easy way to manage additional APT repositories. Adding a new repository will notify running the `execute[apt-get-update]` resource immediately.
+
+#### Actions
+- :add: creates a repository file and builds the repository listing (default)
+- :remove: removes the repository file
+
+#### Attribute Parameters
+- repo_name: name attribute. The name of the channel to discover
+- uri: the base of the Debian distribution
+- distribution: this is usually your release's codename...ie something like `karmic`, `lucid` or `maverick`
+- components: package groupings... when in doubt use `main`
+- arch: constrain package to a particular arch like `i386`, `amd64` or even `armhf` or `powerpc`. Defaults to nil.
+- trusted: treat all packages from this repository as authenticated regardless of signature
+- deb_src: whether or not to add the repository as a source repo as well - value can be `true` or `false`, default `false`.
+- keyserver: the GPG keyserver where the key for the repo should be retrieved
+- key: if a `keyserver` is provided, this is assumed to be the fingerprint, otherwise it can be either the URI to the GPG key for the repo, or a cookbook_file.
+- key_proxy: if set, pass the specified proxy via `http-proxy=` to GPG.
+- cookbook: if key should be a cookbook_file, specify a cookbook where the key is located for files/default. Defaults to nil, so it will use the cookbook where the resource is used.
+
+#### Examples
+
+Add the Zenoss repo:
+
+```ruby
+apt_repository 'zenoss' do
+  uri        'http://dev.zenoss.org/deb'
+  components ['main', 'stable']
+end
+```
+
+Enable Ubuntu [multiverse](https://help.ubuntu.com/community/Repositories/Ubuntu) repositories:
+
+```ruby
+apt_repository 'security-ubuntu-multiverse' do
+  uri        'http://security.ubuntu.com/ubuntu'
+  distribution 'trusty-security'
+  components ['multiverse']
+  deb_src 'true'
+end
+```
+
+Add the Nginx PPA, autodetect the key and repository url:
+
+```ruby
+apt_repository 'nginx-php' do
+  uri          'ppa:nginx/stable'
+  distribution node['lsb']['codename']
+end
+```
+
+Add the JuJu PPA, grab the key from the keyserver, and add source repo:
+
+```ruby
+apt_repository 'juju' do
+  uri 'http://ppa.launchpad.net/juju/stable/ubuntu'
+  components ['main']
+  distribution 'trusty'
+  key 'C8068B11'
+  keyserver 'keyserver.ubuntu.com'
+  action :add
+  deb_src true
+end
+```
+
+Add the Cloudera Repo of CDH4 packages for Ubuntu 12.04 on AMD64:
+
+```ruby
+apt_repository 'cloudera' do
+  uri          'http://archive.cloudera.com/cdh4/ubuntu/precise/amd64/cdh'
+  arch         'amd64'
+  distribution 'precise-cdh4'
+  components   ['contrib']
+  key          'http://archive.cloudera.com/debian/archive.key'
+end
+```
+
+Remove Zenoss repo:
+
+```ruby
+apt_repository 'zenoss' do
+  action :remove
+end
+```
+
+### `apt_preference`
+This LWRP provides an easy way to pin packages in /etc/apt/preferences.d. Although apt-pinning is quite helpful from time to time please note that Debian does not encourage its use without thorough consideration.
+
+Further information regarding apt-pinning is available via http://wiki.debian.org/AptPreferences.
+
+#### Actions
+- :add: creates a preferences file under /etc/apt/preferences.d
+- :remove: Removes the file, therefore unpin the package
+
+#### Attribute Parameters
+- package_name: name attribute. The name of the package
+- glob: Pin by glob() expression or regexp surrounded by /.
+- pin: The package version/repository to pin
+- pin_priority: The pinning priority aka "the highest package version wins"
+
+#### Examples
+Pin libmysqlclient16 to version 5.1.49-3:
+
+```ruby
+apt_preference 'libmysqlclient16' do
+  pin          'version 5.1.49-3'
+  pin_priority '700'
+end
+```
+
+Unpin libmysqlclient16:
+
+```ruby
+apt_preference 'libmysqlclient16' do
+  action :remove
+end
+```
+
+Pin all packages from dotdeb.org:
+
+```ruby
+apt_preference 'dotdeb' do
+  glob         '*'
+  pin          'origin packages.dotdeb.org'
+  pin_priority '700'
+end
+```
+
+
+Usage
+-----
+Put `recipe[apt]` first in the run list. If you have other recipes that you want to use to configure how apt behaves, like new sources, notify the execute resource to run, e.g.:
+
+```ruby
+template '/etc/apt/sources.list.d/my_apt_sources.list' do
+  notifies :run, 'execute[apt-get update]', :immediately
+end
+```
+
+The above will run during execution phase since it is a normal template resource, and should appear before other package resources that need the sources in the template.
+
+Put `recipe[apt::cacher-ng]` in the run_list for a server to provide APT caching and add `recipe[apt::cacher-client]` on the rest of the Debian-based nodes to take advantage of the caching server.
+
+If you want to cleanup unused packages, there is also the `apt-get autoclean` and `apt-get autoremove` resources provided for automated cleanup.
+
+
+License & Authors
+-----------------
+- Author:: Joshua Timberman (joshua@chef.io)
+- Author:: Matt Ray (matt@chef.io)
+- Author:: Seth Chisamore (schisamo@chef.io)
+
+```text
+Copyright:: 2009-2015, Chef Software, Inc
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+```