from-scratch 0.1.0 → 0.1.1

data/cookbooks/postgresql/recipes/contrib.rb

@@ -0,0 +1,44 @@
+#
+# Cookbook Name:: postgresql
+# Recipe:: contrib
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+db_name = node['postgresql']['database_name']
+
+# Install the PostgreSQL contrib package(s) from the distribution,
+# as specified by the node attributes.
+node['postgresql']['contrib']['packages'].each do |pg_pack|
+
+  package pg_pack
+
+end
+
+include_recipe "postgresql::server"
+
+# Install PostgreSQL contrib extentions into the database, as specified by the
+# node attribute node['postgresql']['database_name'].
+if (node['postgresql']['contrib'].attribute?('extensions'))
+  node['postgresql']['contrib']['extensions'].each do |pg_ext|
+    bash "install-#{pg_ext}-extension" do
+      user 'postgres'
+      code <<-EOH
+        echo 'CREATE EXTENSION IF NOT EXISTS "#{pg_ext}";' | psql -d "#{db_name}"
+      EOH
+      action :run
+      ::Chef::Resource.send(:include, Opscode::PostgresqlHelpers)
+      not_if {extension_installed?(pg_ext)}
+    end
+  end
+end

data/cookbooks/postgresql/recipes/default.rb

@@ -0,0 +1,18 @@
+#
+# Cookbook Name:: postgresql
+# Recipe:: default
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+include_recipe "postgresql::client"

data/cookbooks/postgresql/recipes/ruby.rb

@@ -0,0 +1,117 @@
+#
+# Cookbook Name:: postgresql
+# Recipe:: ruby
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+# Load the pgdgrepo_rpm_info method from libraries/default.rb
+::Chef::Recipe.send(:include, Opscode::PostgresqlHelpers)
+
+begin
+  require 'pg'
+rescue LoadError
+
+  if platform_family?('ubuntu', 'debian')
+    e = execute 'apt-get update' do
+      action :nothing
+    end
+    e.run_action(:run) unless ::File.exists?('/var/lib/apt/periodic/update-success-stamp')
+  end
+
+  node.set['build-essential']['compile_time'] = true
+  include_recipe "build-essential"
+  include_recipe "postgresql::client"
+
+  if node['postgresql']['enable_pgdg_yum']
+    repo_rpm_url, repo_rpm_filename, repo_rpm_package = pgdgrepo_rpm_info
+    include_recipe "postgresql::yum_pgdg_postgresql"
+    resources("remote_file[#{Chef::Config[:file_cache_path]}/#{repo_rpm_filename}]").run_action(:create)
+    resources("package[#{repo_rpm_package}]").run_action(:install)
+    ENV['PATH'] = "/usr/pgsql-#{node['postgresql']['version']}/bin:#{ENV['PATH']}"
+  end
+
+  if node['postgresql']['enable_pgdg_apt']
+    include_recipe "postgresql::apt_pgdg_postgresql"
+    resources("file[remove deprecated Pitti PPA apt repository]").run_action(:delete)
+    resources("apt_repository[apt.postgresql.org]").run_action(:add)
+  end
+
+  node['postgresql']['client']['packages'].each do |pg_pack|
+    resources("package[#{pg_pack}]").run_action(:install)
+  end
+
+  begin
+    chef_gem "pg"
+  rescue Gem::Installer::ExtensionBuildError, Mixlib::ShellOut::ShellCommandFailed => e
+    # Are we an omnibus install?
+    raise if RbConfig.ruby.scan(%r{(chef|opscode)}).empty?
+    # Still here, must be omnibus. Lets make this thing install!
+    Chef::Log.warn 'Failed to properly build pg gem. Forcing properly linking and retrying (omnibus fix)'
+    gem_dir = e.message.scan(%r{will remain installed in ([^ ]+)}).flatten.first
+    raise unless gem_dir
+    gem_name = File.basename(gem_dir)
+    ext_dir = File.join(gem_dir, 'ext')
+    gem_exec = File.join(File.dirname(RbConfig.ruby), 'gem')
+    new_content = <<-EOS
+require 'rbconfig'
+%w(
+configure_args
+LIBRUBYARG_SHARED
+LIBRUBYARG_STATIC
+LIBRUBYARG
+LDFLAGS
+).each do |key|
+  RbConfig::CONFIG[key].gsub!(/-Wl[^ ]+( ?\\/[^ ]+)?/, '')
+  RbConfig::MAKEFILE_CONFIG[key].gsub!(/-Wl[^ ]+( ?\\/[^ ]+)?/, '')
+end
+RbConfig::CONFIG['RPATHFLAG'] = ''
+RbConfig::MAKEFILE_CONFIG['RPATHFLAG'] = ''
+EOS
+    new_content << File.read(extconf_path = File.join(ext_dir, 'extconf.rb'))
+    File.open(extconf_path, 'w') do |file|
+      file.write(new_content)
+    end
+
+    lib_builder = execute 'generate pg gem Makefile' do
+      # [COOK-3490] pg gem install requires full path on RHEL
+      command "PATH=$PATH:/usr/pgsql-#{node['postgresql']['version']}/bin #{RbConfig.ruby} extconf.rb"
+      cwd ext_dir
+      action :nothing
+    end
+    lib_builder.run_action(:run)
+
+    lib_maker = execute 'make pg gem lib' do
+      command 'make'
+      cwd ext_dir
+      action :nothing
+    end
+    lib_maker.run_action(:run)
+
+    lib_installer = execute 'install pg gem lib' do
+      command 'make install'
+      cwd ext_dir
+      action :nothing
+    end
+    lib_installer.run_action(:run)
+
+    spec_installer = execute 'install pg spec' do
+      command "#{gem_exec} spec ./cache/#{gem_name}.gem --ruby > ./specifications/#{gem_name}.gemspec"
+      cwd File.join(gem_dir, '..', '..')
+      action :nothing
+    end
+    spec_installer.run_action(:run)
+
+    Chef::Log.warn 'Installation of pg gem successful!'
+  end
+end

data/cookbooks/postgresql/recipes/server.rb

@@ -0,0 +1,89 @@
+#
+# Cookbook Name:: postgresql
+# Recipe:: server
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+::Chef::Recipe.send(:include, Opscode::OpenSSL::Password)
+
+include_recipe "postgresql::client"
+
+# randomly generate postgres password, unless using solo - see README
+if Chef::Config[:solo]
+  missing_attrs = %w{
+    postgres
+  }.select do |attr|
+    node['postgresql']['password'][attr].nil?
+  end.map { |attr| "node['postgresql']['password']['#{attr}']" }
+
+  if !missing_attrs.empty?
+    Chef::Log.fatal([
+        "You must set #{missing_attrs.join(', ')} in chef-solo mode.",
+        "For more information, see https://github.com/opscode-cookbooks/postgresql#chef-solo-note"
+      ].join(' '))
+    raise
+  end
+else
+  # TODO: The "secure_password" is randomly generated plain text, so it
+  # should be converted to a PostgreSQL specific "encrypted password" if
+  # it should actually install a password (as opposed to disable password
+  # login for user 'postgres'). However, a random password wouldn't be
+  # useful if it weren't saved as clear text in Chef Server for later
+  # retrieval.
+  unless node.key?('postgresql') && node['postgresql'].key?('password') && node['postgresql']['password'].key?('postgres')
+    node.set_unless['postgresql']['password']['postgres'] = secure_password
+    node.save
+  end
+end
+
+# Include the right "family" recipe for installing the server
+# since they do things slightly differently.
+case node['platform_family']
+when "rhel", "fedora", "suse"
+  include_recipe "postgresql::server_redhat"
+when "debian"
+  include_recipe "postgresql::server_debian"
+end
+
+# Versions prior to 9.2 do not have a config file option to set the SSL
+# key and cert path, and instead expect them to be in a specific location.
+if node['postgresql']['version'].to_f < 9.2 && node['postgresql']['config'].attribute?('ssl_cert_file')
+  link ::File.join(node['postgresql']['config']['data_directory'], 'server.crt') do
+    to node['postgresql']['config']['ssl_cert_file']
+  end
+end
+
+if node['postgresql']['version'].to_f < 9.2 && node['postgresql']['config'].attribute?('ssl_key_file')
+  link ::File.join(node['postgresql']['config']['data_directory'], 'server.key') do
+    to node['postgresql']['config']['ssl_key_file']
+  end
+end
+
+# NOTE: Consider two facts before modifying "assign-postgres-password":
+# (1) Passing the "ALTER ROLE ..." through the psql command only works
+#     if passwordless authorization was configured for local connections.
+#     For example, if pg_hba.conf has a "local all postgres ident" rule.
+# (2) It is probably fruitless to optimize this with a not_if to avoid
+#     setting the same password. This chef recipe doesn't have access to
+#     the plain text password, and testing the encrypted (md5 digest)
+#     version is not straight-forward.
+bash "assign-postgres-password" do
+  user 'postgres'
+  code <<-EOH
+  echo "ALTER ROLE postgres ENCRYPTED PASSWORD '#{node['postgresql']['password']['postgres']}';" | psql -p #{node['postgresql']['config']['port']}
+  EOH
+  action :run
+  not_if "ls #{node['postgresql']['config']['data_directory']}/recovery.conf"
+  only_if { node['postgresql']['assign_postgres_password'] }
+end

data/cookbooks/postgresql/recipes/server_conf.rb

@@ -0,0 +1,34 @@
+#
+# Cookbook Name:: postgresql
+# Recipe:: server
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+change_notify = node['postgresql']['server']['config_change_notify']
+
+template "#{node['postgresql']['dir']}/postgresql.conf" do
+  source "postgresql.conf.erb"
+  owner "postgres"
+  group "postgres"
+  mode 0600
+  notifies change_notify, 'service[postgresql]', :immediately
+end
+
+template "#{node['postgresql']['dir']}/pg_hba.conf" do
+  source "pg_hba.conf.erb"
+  owner "postgres"
+  group "postgres"
+  mode 00600
+  notifies change_notify, 'service[postgresql]', :immediately
+end

data/cookbooks/postgresql/recipes/server_debian.rb

@@ -0,0 +1,38 @@
+#
+# Cookbook Name:: postgresql
+# Recipe:: server
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+include_recipe "postgresql::client"
+
+node['postgresql']['server']['packages'].each do |pg_pack|
+
+  package pg_pack
+
+end
+
+include_recipe "postgresql::server_conf"
+
+service "postgresql" do
+  service_name node['postgresql']['server']['service_name']
+  supports :restart => true, :status => true, :reload => true
+  action [:enable, :start]
+end
+
+execute 'Set locale and Create cluster' do
+  command 'export LC_ALL=C; /usr/bin/pg_createcluster --start ' + node['postgresql']['version'] + ' main'
+  action :run
+  not_if { ::File.directory?('/etc/postgresql/' + node['postgresql']['version'] + '/main') }
+end

data/cookbooks/postgresql/recipes/server_redhat.rb

@@ -0,0 +1,100 @@
+#
+# Cookbook Name:: postgresql
+# Recipe:: server
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+include_recipe "postgresql::client"
+
+svc_name = node['postgresql']['server']['service_name']
+dir = node['postgresql']['dir']
+initdb_locale = node['postgresql']['initdb_locale']
+
+# Create a group and user like the package will.
+# Otherwise the templates fail.
+
+group "postgres" do
+  gid 26
+end
+
+user "postgres" do
+  shell "/bin/bash"
+  comment "PostgreSQL Server"
+  home "/var/lib/pgsql"
+  gid "postgres"
+  system true
+  uid 26
+  supports :manage_home => false
+end
+
+directory dir do
+  owner "postgres"
+  group "postgres"
+  recursive true
+  action :create
+end
+
+node['postgresql']['server']['packages'].each do |pg_pack|
+
+  package pg_pack
+
+end
+
+# Starting with Fedora 16, the pgsql sysconfig files are no longer used.
+# The systemd unit file does not support 'initdb' or 'upgrade' actions.
+# Use the postgresql-setup script instead.
+
+unless platform_family?("fedora") and node['platform_version'].to_i >= 16
+
+  directory "/etc/sysconfig/pgsql" do
+    mode "0644"
+    recursive true
+    action :create
+  end
+
+  template "/etc/sysconfig/pgsql/#{svc_name}" do
+    source "pgsql.sysconfig.erb"
+    mode "0644"
+    notifies :restart, "service[postgresql]", :delayed
+  end
+
+end
+
+if platform_family?("fedora") and node['platform_version'].to_i >= 16
+
+  execute "postgresql-setup initdb #{svc_name}" do
+    not_if { ::FileTest.exist?(File.join(dir, "PG_VERSION")) }
+  end
+
+elsif platform?("redhat") and node['platform_version'].to_i >= 7
+
+  execute "postgresql#{node['postgresql']['version'].split('.').join}-setup initdb #{svc_name}" do
+    not_if { ::FileTest.exist?(File.join(dir, "PG_VERSION")) }
+  end
+
+else !platform_family?("suse")
+
+  execute "/sbin/service #{svc_name} initdb #{initdb_locale}" do
+    not_if { ::FileTest.exist?(File.join(dir, "PG_VERSION")) }
+  end
+
+end
+
+include_recipe "postgresql::server_conf"
+
+service "postgresql" do
+  service_name svc_name
+  supports :restart => true, :status => true, :reload => true
+  action [:enable, :start]
+end