gigpark-ec2onrails 0.9.10.3

data/ec2onrails.gemspec

@@ -0,0 +1,46 @@
+# This file is auto-generated, do not edit.
+# Edit echoe_config.rb and then run 'rake ec2onrails_gem'
+# 
+# -*- encoding: utf-8 -*-
+
+Gem::Specification.new do |s|
+  s.name = %q{ec2onrails}
+  s.version = "0.9.10.3"
+
+  s.required_rubygems_version = Gem::Requirement.new(">= 1.2") if s.respond_to? :required_rubygems_version=
+  s.authors = ["Paul Dowman, Adam Greene"]
+  s.date = %q{2009-08-16}
+  s.description = %q{Client-side libraries (Capistrano tasks) for managing and  deploying to EC2 on Rails servers.}
+  s.email = %q{paul@pauldowman.com}
+  s.extra_rdoc_files = ["CHANGELOG", "lib/ec2onrails/capistrano_utils.rb", "lib/ec2onrails/recipes/db.rb", "lib/ec2onrails/recipes/deploy.rb", "lib/ec2onrails/recipes/server.rb", "lib/ec2onrails/recipes.rb", "lib/ec2onrails/version.rb", "lib/ec2onrails.rb", "README.textile"]
+  s.files = ["CHANGELOG", "COPYING", "ec2onrails.gemspec", "echoe_config.rb", "examples/Capfile", "examples/deploy.rb", "examples/s3.yml", "lib/ec2onrails/capistrano_utils.rb", "lib/ec2onrails/recipes/db.rb", "lib/ec2onrails/recipes/deploy.rb", "lib/ec2onrails/recipes/server.rb", "lib/ec2onrails/recipes.rb", "lib/ec2onrails/version.rb", "lib/ec2onrails.rb", "Manifest", "Rakefile", "README.textile", "server/build", "server/files/etc/aliases", "server/files/etc/cron.d/ec2onrails", "server/files/etc/cron.daily/app", "server/files/etc/cron.daily/logrotate_post", "server/files/etc/cron.hourly/app", "server/files/etc/cron.monthly/app", "server/files/etc/cron.weekly/app", "server/files/etc/default/varnish", "server/files/etc/default/varnishncsa", "server/files/etc/denyhosts.conf", "server/files/etc/dpkg/dpkg.cfg", "server/files/etc/ec2onrails/rails_env", "server/files/etc/ec2onrails/roles.yml", "server/files/etc/environment", "server/files/etc/event.d/god", "server/files/etc/god/db_primary.god", "server/files/etc/god/dkim_filter.god", "server/files/etc/god/master.conf", "server/files/etc/god/memcache.god", "server/files/etc/god/notifications.god", "server/files/etc/god/proxy.god", "server/files/etc/god/system.god", "server/files/etc/god/web.god", "server/files/etc/init.d/ec2-every-startup", "server/files/etc/init.d/ec2-first-startup", "server/files/etc/init.d/nginx", "server/files/etc/logrotate.d/nginx", "server/files/etc/logrotate.d/rails", "server/files/etc/logrotate.d/varnish", "server/files/etc/memcached.conf", "server/files/etc/motd.tail", "server/files/etc/mysql/my.cnf", "server/files/etc/nginx/conf.d/custom.conf", "server/files/etc/nginx/nginx.conf.erb", "server/files/etc/postfix/main.cf", "server/files/etc/README", "server/files/etc/ssh/sshd_config", "server/files/etc/sudoers", "server/files/etc/syslog.conf", "server/files/etc/varnish/default.vcl.erb", "server/files/usr/local/ec2onrails/bin/archive_file", "server/files/usr/local/ec2onrails/bin/backup_app_db", "server/files/usr/local/ec2onrails/bin/backup_dir", "server/files/usr/local/ec2onrails/bin/ec2_meta_data", "server/files/usr/local/ec2onrails/bin/exec_runner", "server/files/usr/local/ec2onrails/bin/in_role", "server/files/usr/local/ec2onrails/bin/init_services", "server/files/usr/local/ec2onrails/bin/install_system_files", "server/files/usr/local/ec2onrails/bin/optimize_mysql", "server/files/usr/local/ec2onrails/bin/public-hostname", "server/files/usr/local/ec2onrails/bin/rails_env", "server/files/usr/local/ec2onrails/bin/rebundle", "server/files/usr/local/ec2onrails/bin/restore_app_db", "server/files/usr/local/ec2onrails/bin/set_rails_env", "server/files/usr/local/ec2onrails/bin/set_roles", "server/files/usr/local/ec2onrails/bin/uninstall_system_files", "server/files/usr/local/ec2onrails/config", "server/files/usr/local/ec2onrails/COPYING", "server/files/usr/local/ec2onrails/lib/aws_helper.rb", "server/files/usr/local/ec2onrails/lib/god_helper.rb", "server/files/usr/local/ec2onrails/lib/mysql_helper.rb", "server/files/usr/local/ec2onrails/lib/roles_helper.rb", "server/files/usr/local/ec2onrails/lib/s3_helper.rb", "server/files/usr/local/ec2onrails/lib/system_files_helper.rb", "server/files/usr/local/ec2onrails/lib/system_files_manifest.rb", "server/files/usr/local/ec2onrails/lib/utils.rb", "server/files/usr/local/ec2onrails/lib/vendor/ini.rb", "server/files/usr/local/ec2onrails/startup-scripts/every-startup/create-mysqld-pid-dir", "server/files/usr/local/ec2onrails/startup-scripts/every-startup/README", "server/files/usr/local/ec2onrails/startup-scripts/first-startup/create-dirs", "server/files/usr/local/ec2onrails/startup-scripts/first-startup/generate-default-web-cert-and-key", "server/files/usr/local/ec2onrails/startup-scripts/first-startup/get-hostname", "server/files/usr/local/ec2onrails/startup-scripts/first-startup/misc", "server/files/usr/local/ec2onrails/startup-scripts/first-startup/prepare-mysql-data-dir", "server/files/usr/local/ec2onrails/startup-scripts/first-startup/README", "server/files/usr/local/ec2onrails/startup-scripts/first-startup/setup-credentials", "server/files/usr/local/ec2onrails/startup-scripts/first-startup/setup-file-permissions", "server/rakefile-wrapper", "server/rakefile.rb", "test/autobench.conf", "test/spec/lib/s3_helper_spec.rb", "test/spec/lib/s3_old.yml", "test/spec/lib/system_files_manifest_spec.rb", "test/spec/test_files/system_files1/_manifest", "test/spec/test_files/system_files1/test1", "test/spec/test_files/system_files1/test2", "test/spec/test_files/system_files1/testfolder/test3", "test/spec/test_files/system_files2/_manifest", "test/spec/test_files/system_files2/test1", "test/spec/test_files/system_files2/test2", "test/spec/test_files/system_files2/testfolder/test3", "test/spec/test_files/test2", "test/test_app/app/controllers/application_controller.rb", "test/test_app/app/controllers/db_fast_controller.rb", "test/test_app/app/controllers/fast_controller.rb", "test/test_app/app/controllers/slow_controller.rb", "test/test_app/app/controllers/very_slow_controller.rb", "test/test_app/app/helpers/application_helper.rb", "test/test_app/Capfile", "test/test_app/config/boot.rb", "test/test_app/config/database.yml", "test/test_app/config/deploy.rb", "test/test_app/config/ec2onrails/config.rb", "test/test_app/config/environment.rb", "test/test_app/config/environments/development.rb", "test/test_app/config/environments/production.rb", "test/test_app/config/environments/test.rb", "test/test_app/config/initializers/backtrace_silencers.rb", "test/test_app/config/initializers/inflections.rb", "test/test_app/config/initializers/mime_types.rb", "test/test_app/config/initializers/new_rails_defaults.rb", "test/test_app/config/initializers/session_store.rb", "test/test_app/config/locales/en.yml", "test/test_app/config/routes.rb", "test/test_app/doc/README_FOR_APP", "test/test_app/public/404.html", "test/test_app/public/422.html", "test/test_app/public/500.html", "test/test_app/public/favicon.ico", "test/test_app/public/images/rails.png", "test/test_app/public/index.html", "test/test_app/public/javascripts/application.js", "test/test_app/public/javascripts/controls.js", "test/test_app/public/javascripts/dragdrop.js", "test/test_app/public/javascripts/effects.js", "test/test_app/public/javascripts/prototype.js", "test/test_app/public/robots.txt", "test/test_app/Rakefile", "test/test_app/README", "test/test_app/script/about", "test/test_app/script/console", "test/test_app/script/dbconsole", "test/test_app/script/destroy", "test/test_app/script/generate", "test/test_app/script/performance/benchmarker", "test/test_app/script/performance/profiler", "test/test_app/script/plugin", "test/test_app/script/runner", "test/test_app/script/server", "test/test_app/test/performance/browsing_test.rb", "test/test_app/test/test_helper.rb", "TODO"]
+  s.homepage = %q{http://ec2onrails.rubyforge.org}
+  s.rdoc_options = ["--line-numbers", "--inline-source", "--title", "Ec2onrails", "--main", "README.textile"]
+  s.require_paths = ["lib"]
+  s.rubyforge_project = %q{ec2onrails}
+  s.rubygems_version = %q{1.3.4}
+  s.summary = %q{Client-side libraries (Capistrano tasks) for managing and  deploying to EC2 on Rails servers.}
+  s.test_files = ["test/test_app/test/performance/browsing_test.rb", "test/test_app/test/test_helper.rb"]
+
+  if s.respond_to? :specification_version then
+    current_version = Gem::Specification::CURRENT_SPECIFICATION_VERSION
+    s.specification_version = 3
+
+    if Gem::Version.new(Gem::RubyGemsVersion) >= Gem::Version.new('1.2.0') then
+      s.add_runtime_dependency(%q<capistrano>, [">= 2.4.3"])
+      s.add_runtime_dependency(%q<archive-tar-minitar>, [">= 0.5.2"])
+      s.add_runtime_dependency(%q<optiflag>, [">= 0.6.5"])
+      s.add_development_dependency(%q<rake>, [">= 0.7.1"])
+    else
+      s.add_dependency(%q<capistrano>, [">= 2.4.3"])
+      s.add_dependency(%q<archive-tar-minitar>, [">= 0.5.2"])
+      s.add_dependency(%q<optiflag>, [">= 0.6.5"])
+      s.add_dependency(%q<rake>, [">= 0.7.1"])
+    end
+  else
+    s.add_dependency(%q<capistrano>, [">= 2.4.3"])
+    s.add_dependency(%q<archive-tar-minitar>, [">= 0.5.2"])
+    s.add_dependency(%q<optiflag>, [">= 0.6.5"])
+    s.add_dependency(%q<rake>, [">= 0.7.1"])
+  end
+end

data/echoe_config.rb

@@ -0,0 +1,27 @@
+require "./lib/ec2onrails/version"
+
+Echoe.new('ec2onrails', Ec2onrails::VERSION::STRING.dup) do |p|
+  p.changelog        = "CHANGELOG"
+
+  p.author           = ['Paul Dowman', 'Adam Greene']
+  p.email            = "paul@pauldowman.com"
+
+  p.summary = <<-DESC.strip.gsub(/\n\s+/, " ")
+   Client-side libraries (Capistrano tasks) for managing and 
+   deploying to EC2 on Rails servers.
+  DESC
+
+  #OTHER helpful options
+  # p.install_message = "perhaps telling them where to find the example docs?"
+  # p.rdoc_pattern
+  p.url              = "http://ec2onrails.rubyforge.org"
+  p.need_zip         = true
+  p.rdoc_pattern     = /^(lib|README.textile|CHANGELOG)/
+
+  p.dependencies     = [
+                       'capistrano           >=2.4.3', 
+                       'archive-tar-minitar  >=0.5.2', 
+                       'optiflag             >=0.6.5']
+
+  p.development_dependencies = ['rake >=0.7.1']
+end

data/examples/Capfile

@@ -0,0 +1,3 @@
+load 'deploy' if respond_to?(:namespace) # cap2 differentiator
+load 'config/deploy'
+require 'ec2onrails/recipes'

data/examples/deploy.rb

@@ -0,0 +1,103 @@
+# This is a sample Capistrano config file for EC2 on Rails.
+# It should be edited and customized.
+
+set :application, "yourapp"
+
+set :repository, "http://svn.foo.com/svn/#{application}/trunk"
+
+# NOTE: for some reason Capistrano requires you to have both the public and
+# the private key in the same folder, the public key should have the 
+# extension ".pub".
+ssh_options[:keys] = ["#{ENV['HOME']}/.ssh/your-ec2-key"]
+
+# Your EC2 instances. Use the ec2-xxx....amazonaws.com hostname, not
+# any other name (in case you have your own DNS alias) or it won't
+# be able to resolve to the internal IP address.
+role :web,      "ec2-12-xx-xx-xx.z-1.compute-1.amazonaws.com"
+role :memcache, "ec2-12-xx-xx-xx.z-1.compute-1.amazonaws.com"
+role :db,       "ec2-56-xx-xx-xx.z-1.compute-1.amazonaws.com", :primary => true
+# role :db,       "ec2-56-xx-xx-xx.z-1.compute-1.amazonaws.com", :primary => true, :ebs_vol_id => 'vol-12345abc'
+# optinally, you can specify Amazon's EBS volume ID if the database is persisted 
+# via Amazon's EBS.  See the main README for more information.
+
+# Whatever you set here will be taken set as the default RAILS_ENV value
+# on the server. Your app and your hourly/daily/weekly/monthly scripts
+# will run with RAILS_ENV set to this value.
+set :rails_env, "production"
+
+# EC2 on Rails config. 
+# NOTE: Some of these should be omitted if not needed.
+set :ec2onrails_config, {
+  # S3 bucket and "subdir" used by the ec2onrails:db:restore task
+  # NOTE: this only applies if you are not using EBS
+  :restore_from_bucket => "your-bucket",
+  :restore_from_bucket_subdir => "database",
+  
+  # S3 bucket and "subdir" used by the ec2onrails:db:archive task
+  # This does not affect the automatic backup of your MySQL db to S3, it's
+  # just for manually archiving a db snapshot to a different bucket if 
+  # desired.
+  # NOTE: this only applies if you are not using EBS
+  :archive_to_bucket => "your-other-bucket",
+  :archive_to_bucket_subdir => "db-archive/#{Time.new.strftime('%Y-%m-%d--%H-%M-%S')}",
+  
+  # Set a root password for MySQL. Run "cap ec2onrails:db:set_root_password"
+  # to enable this. This is optional, and after doing this the
+  # ec2onrails:db:drop task won't work, but be aware that MySQL accepts 
+  # connections on the public network interface (you should block the MySQL
+  # port with the firewall anyway). 
+  # If you don't care about setting the mysql root password then remove this.
+  :mysql_root_password => "your-mysql-root-password",
+  
+  # Any extra Ubuntu packages to install if desired
+  # If you don't want to install extra packages then remove this.
+  :packages => ["logwatch", "imagemagick"],
+  
+  # Any extra RubyGems to install if desired: can be "gemname" or if a 
+  # particular version is desired "gemname -v 1.0.1"
+  # If you don't want to install extra rubygems then remove this
+  # NOTE: if you are using rails 2.1, ec2onrails calls 'sudo rake gem:install',
+  # which will install gems defined in your rails configuration
+  :rubygems => ["rmagick", "rfacebook -v 0.9.7"],
+  
+  # extra security measures are taken if this is true, BUT it makes initial
+  # experimentation and setup a bit tricky.  For example, if you do not
+  # have your ssh keys setup correctly, you will be locked out of your
+  # server after 3 attempts for upto 3 months.  
+  :harden_server => false,
+  
+  #if you want to harden the server, or setup email signing, you will need to set the domain
+  #if you use Capistrano's multistage extension (recommended!), you can add a line like this to your
+  #environment specific file:
+  #      ec2onrails_config[:service_domain] = 'staging.mydomain.com'
+  :service_domain => nil,
+  
+  # Set the server timezone. run "cap -e ec2onrails:server:set_timezone" for 
+  # details
+  :timezone => "UTC",
+  
+  # Files to deploy to the server (they'll be owned by root). It's intended
+  # mainly for customized config files for new packages installed via the 
+  # ec2onrails:server:install_packages task. Subdirectories and files inside
+  # here will be placed in the same structure relative to the root of the
+  # server's filesystem. 
+  # If you don't need to deploy customized config files to the server then
+  # remove this.
+  :server_config_files_root => "../server_configs",
+  
+  # If config files are deployed, some services might need to be restarted.
+  # If you don't need to deploy customized config files to the server then
+  # remove this.
+  :services_to_restart => %w(postfix sysklogd),
+  
+  # Set an email address to forward admin mail messages to. If you don't
+  # want to receive mail from the server (e.g. monit alert messages) then
+  # remove this.
+  :mail_forward_address => "you@yourdomain.com",
+  
+  # Set this if you want SSL to be enabled on the web server. The SSL cert 
+  # and key files need to exist on the server, The cert file should be in
+  # /etc/ssl/certs/default.pem and the key file should be in
+  # /etc/ssl/private/default.key (see :server_config_files_root).
+  :enable_ssl => true
+}

data/examples/s3.yml

@@ -0,0 +1,9 @@
+staging:
+  aws_access_key: ABC123
+  aws_secret_access_key: abc123abc123abc123abc123
+  bucket_base_name: yourbucket
+
+production:
+  aws_access_key: DEF456
+  aws_secret_access_key: def456def456def456def456
+  bucket_base_name: yourbucket

data/lib/ec2onrails.rb

@@ -0,0 +1,20 @@
+#    This file is part of EC2 on Rails.
+#    http://rubyforge.org/projects/ec2onrails/
+#
+#    Copyright 2007 Paul Dowman, http://pauldowman.com/
+#
+#    EC2 on Rails is free software; you can redistribute it and/or modify
+#    it under the terms of the GNU General Public License as published by
+#    the Free Software Foundation; either version 2 of the License, or
+#    (at your option) any later version.
+#
+#    EC2 on Rails is distributed in the hope that it will be useful,
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+#    GNU General Public License for more details.
+#
+#    You should have received a copy of the GNU General Public License
+#    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+
+$:.unshift File.dirname(__FILE__)

data/lib/ec2onrails/capistrano_utils.rb

@@ -0,0 +1,47 @@
+module Ec2onrails
+  module CapistranoUtils
+    def run_local(command)
+      result = system command
+      raise("error: #{$?}") unless result
+    end
+    
+    def run_init_script(script, arg)
+      # TODO only restart a service if it's already started. 
+      # Aside from being smarter and more efficient, This will make sure we 
+      # aren't starting a service that shouldn't be started for the current
+      # roles (e.g. don't start nginx when we're not in the web role)
+      # How? Maybe need another param with the process name?
+      sudo "/etc/init.d/#{script} #{arg}"
+    end
+    
+    # return hostnames for the role named role_sym that has the specified options
+    def hostnames_for_role(role_sym, options = {})
+      role = roles[role_sym]
+      unless role
+        return []
+      end
+      # make sure we match the server with all the passed in options, BUT the server can
+      # have additional options defined.  e.g.: :primary => true and :ebs_vol_id => 'vol-1234abcd'
+      # but we want to select the server where :primary => true
+      role.select{|s| 
+        match = true
+        options.each_pair{|k,v| match = false if s.options[k] != v}
+      }.collect{|s| s.host}
+    end
+    
+    # Like the capture method, but does not print out error stream and swallows 
+    # an exception if the process's exit code != 0
+    def quiet_capture(command, options={})
+      output = ""
+      invoke_command(command, options.merge(:once => true)) do |ch, stream, data|
+        case stream
+        when :out then output << data
+        # when :err then warn "[err :: #{ch[:server]}] #{data}"
+        end
+      end
+    ensure
+      return (output || '').strip
+    end
+    
+  end
+end

data/lib/ec2onrails/recipes.rb

@@ -0,0 +1,146 @@
+#    This file is part of EC2 on Rails.
+#    http://rubyforge.org/projects/ec2onrails/
+#
+#    Copyright 2007 Paul Dowman, http://pauldowman.com/
+#
+#    EC2 on Rails is free software; you can redistribute it and/or modify
+#    it under the terms of the GNU General Public License as published by
+#    the Free Software Foundation; either version 2 of the License, or
+#    (at your option) any later version.
+#
+#    EC2 on Rails is distributed in the hope that it will be useful,
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+#    GNU General Public License for more details.
+#
+#    You should have received a copy of the GNU General Public License
+#    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+require 'fileutils'
+include FileUtils
+require 'tmpdir'
+require 'pp'
+require 'zlib'
+require 'archive/tar/minitar'
+include Archive::Tar
+
+require 'ec2onrails/version'
+require 'ec2onrails/capistrano_utils'
+include Ec2onrails::CapistranoUtils
+
+
+
+Dir[File.join(File.dirname(__FILE__), "recipes/*")].find_all{|x| File.file? x}.each do |recipe|
+  require recipe 
+end
+
+
+Capistrano::Configuration.instance.load do
+
+  unless ec2onrails_config
+    raise "ec2onrails_config variable not set. (It should be a hash.)"
+  end
+  
+  cfg = ec2onrails_config
+  
+  set :ec2onrails_version, Ec2onrails::VERSION::STRING
+  set :deploy_to, "/mnt/app"
+  set :use_sudo, false
+  set :user, "app"
+
+  #in case any changes were made to the configs
+  before "deploy:cold", "ec2onrails:setup"
+  
+  after "deploy:symlink", "ec2onrails:server:set_roles", "ec2onrails:server:init_services"
+  after "deploy:cold", "ec2onrails:db:init_backup", "ec2onrails:db:optimize", "ec2onrails:server:restrict_sudo_access"
+  # TODO I don't think we can do gem source -a every time because I think it adds the same repo multiple times
+  after "ec2onrails:server:install_gems", "ec2onrails:server:add_gem_sources"
+
+  # There's an ordering problem here. For convenience, we want to run 'rake gems:install' automatically
+  # on every deploy, but in the ec2onrails:setup task I want to do update_code before any other 
+  # setup tasks, and at that point I don't want run_rails_rake_gems_install to run. So run_rails_rake_gems_install
+  # can't be triggered by an "after" hook on update_code.
+  # But users might want to have their own tasks triggered after update_code, and those tasks will
+  # fail if they require gems to be installed (or anything else to be set up).
+  # 
+  # The best solution is to use an after hook on "deploy:symlink" or "deploy:update" instead of on
+  # "deploy:update_code"
+  on :load do
+    before "deploy:symlink", "ec2onrails:server:run_rails_rake_gems_install"
+    before "deploy:symlink", "ec2onrails:server:install_system_files"
+  end  
+
+  
+  namespace :ec2onrails do
+    desc <<-DESC
+      Show the AMI id's of the current images for this version of \
+      EC2 on Rails.
+    DESC
+    task :ami_ids do
+      puts "32-bit server image (US location) for EC2 on Rails #{ec2onrails_version}: #{Ec2onrails::VERSION::AMI_ID_32_BIT_US}"
+      puts "64-bit server image (US location) for EC2 on Rails #{ec2onrails_version}: #{Ec2onrails::VERSION::AMI_ID_64_BIT_US}"
+      puts "32-bit server image (EU location) for EC2 on Rails #{ec2onrails_version}: #{Ec2onrails::VERSION::AMI_ID_32_BIT_EU}"
+      puts "64-bit server image (EU location) for EC2 on Rails #{ec2onrails_version}: #{Ec2onrails::VERSION::AMI_ID_64_BIT_EU}"
+    end
+    
+    desc <<-DESC
+      Copies the public key from the server using the external "ssh"
+      command because Net::SSH, which is used by Capistrano, needs it.
+      This will only work if you have an ssh command in the path.
+      If Capistrano can successfully connect to your EC2 instance you
+      don't need to do this. It will copy from one of the servers
+      at random, this can be overridden by specifying the HOST 
+      environment variable
+    DESC
+    task :get_public_key_from_server do
+      host = find_servers_for_task(current_task).first.host
+      privkey = ssh_options[:keys][0]
+      pubkey = "#{privkey}.pub"
+      msg = <<-MSG
+      Your first key in ssh_options[:keys] is #{privkey}, presumably that's 
+      your EC2 private key. The public key will be copied from the server 
+      named '#{host}' and saved locally as #{pubkey}. Continue? [y/n]
+      MSG
+      choice = nil
+      while choice != "y" && choice != "n"
+        choice = Capistrano::CLI.ui.ask(msg).downcase
+        msg = "Please enter 'y' or 'n'."
+      end
+      if choice == "y"
+        run_local "scp -i '#{privkey}' app@#{host}:.ssh/authorized_keys #{pubkey}"
+      end
+    end
+    
+    desc <<-DESC
+      Prepare a newly-started instance for a cold deploy.
+    DESC
+    task :setup do
+      # we now have some things being included inside the app so we deploy
+      # the app's code to the server before we do any other setup
+      server.upload_deploy_keys
+      deploy.setup
+      deploy.update_code
+      
+      ec2onrails.server.allow_sudo do
+        server.set_timezone
+        server.set_mail_forward_address
+        server.install_packages
+        server.install_gems
+        server.run_rails_rake_gems_install
+        server.deploy_files # DEPRECATED, see install_system_files
+        server.install_system_files
+        server.set_roles
+        server.enable_ssl if cfg[:enable_ssl]
+        server.set_rails_env
+        server.restart_services
+        db.create
+        server.harden_server
+        db.enable_ebs
+        db.set_root_password
+      end
+    end
+
+  end
+end
+
+

data/lib/ec2onrails/recipes/db.rb

@@ -0,0 +1,366 @@
+Capistrano::Configuration.instance.load do
+  cfg = ec2onrails_config
+  
+  namespace :ec2onrails do
+    desc <<-DESC
+      Deploy and restore database from S3
+    DESC
+    task :restore_db_and_deploy do
+      db.recreate
+      deploy.update_code
+      deploy.symlink
+      db.restore
+      deploy.migrations
+    end
+    
+    namespace :db do
+      desc <<-DESC
+        [internal] Load configuration info for the database from 
+        config/database.yml, and start mysql (it must be running
+        in order to interact with it).
+      DESC
+      task :load_config do
+        unless hostnames_for_role(:db, :primary => true).empty?
+          db_config = YAML::load(ERB.new(File.read("config/database.yml")).result)[rails_env.to_s] || {}
+          cfg[:db_name]     ||= db_config['database']
+          cfg[:db_user]     ||= db_config['username'] || db_config['user'] 
+          cfg[:db_password] ||= db_config['password']
+          cfg[:db_host]     ||= db_config['host']
+          cfg[:db_port]     ||= db_config['port']
+          cfg[:db_socket]   ||= db_config['socket']
+        
+          if (cfg[:db_host].nil? || cfg[:db_host].empty?) && (cfg[:db_socket].nil? || cfg[:db_socket].empty?)
+              raise "ERROR: missing database config. Make sure database.yml contains a '#{rails_env}' section with either 'host: hostname' or 'socket: /var/run/mysqld/mysqld.sock'."
+          end
+        
+          [cfg[:db_name], cfg[:db_user], cfg[:db_password]].each do |s|
+            if s.nil? || s.empty?
+              raise "ERROR: missing database config. Make sure database.yml contains a '#{rails_env}' section with a database name, user, and password."
+            elsif s.match(/['"]/)
+              raise "ERROR: database config string '#{s}' contains quotes."
+            end
+          end
+        end
+      end
+      
+      desc <<-DESC
+        Create the MySQL database. Assumes there is no MySQL root \
+        password. To create a MySQL root password create a task that's run \
+        after this task using an after hook.
+      DESC
+      task :create, :roles => :db do
+        on_rollback { drop }
+        load_config
+        start
+        puts "  * Pausing to give MySQL some time to start up..."
+        sleep 20
+        
+        run %{mysql -u root -e "drop database if exists test; flush privileges;"}
+        # removing anonymous mysql accounts
+        run %{mysql -u root -D mysql -e "delete from db where User = ''; flush privileges;"}
+        run %{mysql -u root -D mysql -e "delete from user where User = ''; flush privileges;"}
+
+        # qoting of database names allows special characters eg (the-database-name)
+        # the quotes need to be double escaped. Once for capistrano and once for the host shell
+        run %{mysql -u root -e "create database if not exists \\`#{cfg[:db_name]}\\`;"}
+        run %{mysql -u root -e "grant all on \\`#{cfg[:db_name]}\\`.* to '#{cfg[:db_user]}'@'%' identified by '#{cfg[:db_password]}';"}
+        run %{mysql -u root -e "grant reload on *.* to '#{cfg[:db_user]}'@'%' identified by '#{cfg[:db_password]}';"}
+        run %{mysql -u root -e "grant super on *.* to '#{cfg[:db_user]}'@'%' identified by '#{cfg[:db_password]}';"}        
+      end
+      
+      desc <<-DESC
+        Move the MySQL database to Amazon's Elastic Block Store (EBS), \
+        which is a persistant data store for the cloud.
+        OPTIONAL PARAMETERS:
+          * SIZE: Pass in a number representing the GB's to hold, like 10. \
+            It will default to 10 gigs.
+          * VOLUME_ID: The volume_id to use for the mysql database    
+        NOTE: keep track of the volume ID, as you'll want to keep this for your \
+        records and probably add it to the :db role in your deploy.rb file \
+        (see the ec2onrails sample deploy.rb file for additional information)
+      DESC
+      task :enable_ebs, :roles => :db, :only => { :primary => true } do        
+        # based off of Eric's work:
+        # http://developer.amazonwebservices.com/connect/entry.jspa?externalID=1663&categoryID=100
+        #
+        # EXPLAINATION:
+        # There is a lot going on here!  At the end, the setup should be:
+        #   * create EBS volume if run outside of the ec2onrails:setup and 
+        #     VOLUME_ID is not passed in when the cap task is called
+        #   * EBS volume attached to /dev/sdh
+        #   * format to xfs if new or do a xfs_check if previously existed
+        #   * mounted on /var/local and update /etc/fstab
+        #   * move /mnt/mysql_data -> /var/local/mysql_data
+        #   * move /mnt/log/mysql  -> /var/local/log/mysql
+        #   * change mysql configs by writing /etc/mysql/conf.d/mysql-ec2-ebs.cnf 
+        #   * keep a copy of the mysql configs with the EBS volume, and if that volume is hooked into
+        #     another instance, make sure the mysql configs that go with that volume are symlinked to /etc/mysql
+        #   * update the file locations of the mysql binary logs in /mnt/log/mysql/mysql-bin.index
+        #   * symlink the moved folders to their old position... makes the move to EBS transparent
+        #   * Amazon doesn't contain EBS information in the meta-data API (yet).  So write
+        #     /etc/ec2onrails/ebs_info.yml
+        #     to contain the meta-data information that we need
+        #
+        # DESIGN CONSIDERATIONS
+        #   * only moving mysql data to EBS.  seems the most obvious, and if we move over other components
+        #     we will have to share that bandwidth (1 Gbps pipe to SAN).  So limiting to what we really need
+        #   * not moving all mysql logic over (tmp scratch space stays local).  Again, this is to limit
+        #     unnecessary bandwidth usage, PLUS, we are charged per million IO to EBS
+        #
+        # TODO:
+        #  * make sure if we have a predefined ebs_vol_id, that we error out with a nice msg IF the zones do not match
+        #  * can we move more of the mysql cache files back to the local disk and off of EBS, like the innodb table caches?
+        #  * right now we force this task to only be run on one server; that works for db :primary => true
+        #    But what is the best way to make this work if it needs to setup multiple servers (like db slaves)?
+        #    I need to figure out how to do a direct mapping from a server definition to a ebs_vol_id
+        #  * when we enable slaves and we setup ebs volumes on them, make it transparent to the user.  
+        #    have the slave create a snapshot of the db.master volume, and then use that to mount from
+        #  * need to do a rollback that if the volume is created but something fails, lets uncreate it?
+        #    carefull though!  If it fails towards the end when information is copied over, it could cause information
+        #    to be lost!
+        #
+        
+        mysql_dir_root = '/var/local'
+        block_mnt      = '/dev/sdh'
+        servers = find_servers_for_task(current_task)
+        
+        if servers.empty?
+          raise Capistrano::NoMatchingServersError, "`#{task.fully_qualified_name}' is only run for servers matching #{task.options.inspect}, but no servers matched"
+        elsif servers.size > 1
+          raise Capistrano::Error, "`#{task.fully_qualified_name}' is can only be run on one server, not #{server.size}"
+        end
+        
+        vol_id = ENV['VOLUME_ID'] || servers.first.options[:ebs_vol_id]
+
+        #HACK!  capistrano doesn't allow arguments to be passed in if we call this task as a method, like 'db.enable_ebs'
+        #       the places where we do call it like that, we don't want to force a move to ebs, so....
+        #       if the call frame is > 1 (ie, another task called it), do NOT force the ebs move
+        no_force = task_call_frames.size > 1
+        prev_created = !(vol_id.nil? || vol_id.empty?)
+        #no vol_id was passed in, but perhaps it is already mounted...?
+        prev_created = true if !quiet_capture("mount | grep -inr '#{mysql_dir_root}' || echo ''").empty?
+
+        unless no_force && (vol_id.nil? || vol_id.empty?)
+          zone = quiet_capture("/usr/local/ec2onrails/bin/ec2_meta_data -key 'placement/availability-zone'")
+          instance_id = quiet_capture("/usr/local/ec2onrails/bin/ec2_meta_data -key 'instance-id'")
+
+          unless prev_created
+            puts "creating new ebs volume...."
+            size = ENV["SIZE"] || "10"
+            cmd = "ec2-create-volume -s #{size} -z #{zone} 2>&1"
+            puts "running: #{cmd}"
+            output = `#{cmd}`
+            puts output
+            vol_id = (output =~ /^VOLUME\t(.+?)\t/ && $1)
+            puts "NOTE: remember that vol_id"
+            sleep(2)          
+          end
+          vol_id.strip! if vol_id
+          if quiet_capture("mount | grep -inr '#{block_mnt}' || echo ''").empty?
+            cmd = "ec2-attach-volume -d #{block_mnt} -i #{instance_id} #{vol_id} 2>&1"
+            puts "running: #{cmd}"
+            output = `#{cmd}`
+            puts output
+            if output =~ /Client.InvalidVolume.ZoneMismatch/i              
+              raise Exception, "The volume you are trying to attach does not reside in the zone of your instance.  Stopping!"
+            end
+      			while !system( "ec2-describe-volumes | grep #{vol_id} | grep attached" )
+      				puts "Waiting for #{vol_id} to be attached..."
+      				sleep 1            
+      			end
+          end
+          
+          ec2onrails.server.allow_sudo do
+            # try to format the volume... if it is already formatted, lets run a check on
+            # it to make sure it is ok, and then continue on
+            # if errors, the device is busy...something else is going on here and it is already mounted... skip!
+            if prev_created
+              # Stop the db (mysql server) for cases where this is being run after the original run
+              # If EBS partiion is already mounted and being used by mysql, it will fail when umount is run
+              god_status = quiet_capture("sudo god status")
+              god_status = god_status.empty? ? {} : YAML::load(god_status)
+              start_stop_db = false
+              start_stop_db = god_status['db_primary']['mysql'] == 'up'
+              if start_stop_db
+                stop
+                puts "Waiting for mysql to stop"
+                sleep(10)
+              end
+              quiet_capture("sudo umount #{mysql_dir_root}") #unmount if need to
+              puts "Checking if the filesystem needs to be created (if you created #{vol_id} yourself)"
+              existing = quiet_capture( "mkfs.xfs /dev/sdh", :via => 'sudo' ).match( /existing filesystem/ )
+              sudo "xfs_check #{block_mnt}"
+              # Restart the db if it 
+              start if start_stop_db && existing
+            else
+              sudo "mkfs.xfs #{block_mnt}"  
+            end
+            
+            # if not added to /etc/fstab, lets do so
+            sudo "sh -c \"grep -iqn '#{mysql_dir_root}' /etc/fstab || echo '#{block_mnt} #{mysql_dir_root} xfs noatime 0 0' >> /etc/fstab\""
+            sudo "mkdir -p #{mysql_dir_root}"
+            #if not already mounted, lets mount it
+            sudo "sh -c \"mount | grep -iqn '#{mysql_dir_root}' || mount '#{mysql_dir_root}'\""
+
+            #ok, now lets move the mysql stuff off of /mnt -> mysql_dir_root
+            stop rescue nil #already stopped
+            sudo "mkdir -p #{mysql_dir_root}/log"
+            #move the data over, but keep a symlink to the new location for backwards compatibility
+            #and do not do it if /mnt/mysql_data has already been moved
+            quiet_capture("sudo sh -c 'test ! -d #{mysql_dir_root}/mysql_data && mv /mnt/mysql_data #{mysql_dir_root}/'")
+            sudo "mv /mnt/mysql_data /mnt/mysql_data_old 2>/dev/null || echo"
+            sudo "ln -fs #{mysql_dir_root}/mysql_data /mnt/mysql_data"
+
+            #but keep the tmpdir on mnt
+            sudo "sh -c 'mkdir -p /mnt/tmp/mysql && chown mysql:mysql /mnt/tmp/mysql'"
+            #move the logs over, but keep a symlink to the new location for backwards compatibility
+            #and do not do it if the logs have already been moved
+            quiet_capture("sudo sh -c 'test ! -d #{mysql_dir_root}/log/mysql_data && mv /mnt/log/mysql #{mysql_dir_root}/log/'")
+            sudo "ln -fs #{mysql_dir_root}/log/mysql /mnt/log/mysql"
+            quiet_capture("sudo sh -c \"test -f #{mysql_dir_root}/log/mysql/mysql-bin.index && \
+                  perl -pi -e 's%/mnt/log/%#{mysql_dir_root}/log/%' #{mysql_dir_root}/log/mysql/mysql-bin.index\"") rescue false
+            
+            if quiet_capture("test -d /var/local/etc/mysql && echo 'yes'").empty?
+              txt = <<-FILE
+[mysqld]
+  datadir          = #{mysql_dir_root}/mysql_data
+  tmpdir           = /mnt/tmp/mysql
+  log_bin          = #{mysql_dir_root}/log/mysql/mysql-bin.log
+  log_slow_queries = #{mysql_dir_root}/log/mysql/mysql-slow.log
+FILE
+              put txt, '/tmp/mysql-ec2-ebs.cnf'
+              sudo 'mv /tmp/mysql-ec2-ebs.cnf /etc/mysql/conf.d/mysql-ec2-ebs.cnf'
+
+              #keep a copy 
+              sudo "rsync -aR /etc/mysql #{mysql_dir_root}/"
+            end
+            # lets use the mysql configs on the EBS volume
+            sudo "mv /etc/mysql /etc/mysql.orig 2>/dev/null"
+            sudo "ln -sf #{mysql_dir_root}/etc/mysql /etc/mysql"
+
+            #just put a README on the drive so we know what this volume is for!
+            txt = <<-FILE
+This volume is setup to be used by Ec2onRails in conjunction with Amazon's EBS, for primary MySql database persistence.
+RAILS_ENV: #{fetch(:rails_env, 'undefined')}
+DOMAIN:    #{fetch(:domain, 'undefined')}
+
+Modify this volume at your own risk
+FILE
+      
+            put txt, "/tmp/VOLUME-README"
+            sudo "mv /tmp/VOLUME-README #{mysql_dir_root}/VOLUME-README"
+            sudo "touch /etc/ec2onrails/ebs_info.yml"
+            ebs_info = quiet_capture("cat /etc/ec2onrails/ebs_info.yml")
+
+            ebs_info = ebs_info.empty? ? {} : YAML::load(ebs_info)
+            ebs_info[mysql_dir_root] = {'block_loc' => block_mnt, 'volume_id' => vol_id} 
+            put(ebs_info.to_yaml, "/tmp/ebs_info.yml")
+            sudo "mv /tmp/ebs_info.yml /etc/ec2onrails/ebs_info.yml"
+            #lets start it back up
+            start  
+          end #end of sudo
+        end
+      end
+      
+      
+      desc <<-DESC
+        [internal] Make sure the MySQL server has been started, just in case the db role 
+        hasn't been set, e.g. when called from ec2onrails:setup.
+        (But don't enable monitoring on it.)
+      DESC
+      task :start, :roles => :db do
+        sudo "god start db_primary"
+      end
+
+      task :stop, :roles => :db do
+        sudo "god stop db_primary"
+      end
+      
+      
+      desc <<-DESC
+        Drop the MySQL database. Assumes there is no MySQL root \
+        password. If there is a MySQL root password, create a task that removes \
+        it and run that task before this one using a before hook.
+      DESC
+      task :drop, :roles => :db do
+        load_config
+        run %{mysql -u root -e "drop database if exists \\`#{cfg[:db_name]}\\`;"}
+      end
+      
+      desc <<-DESC
+        db:drop and db:create.
+      DESC
+      task :recreate, :roles => :db do
+        drop
+        create
+      end
+      
+      desc <<-DESC
+        Set a root password for MySQL, using the variable mysql_root_password \
+        if it is set. If this is done db:drop won't work.
+      DESC
+      task :set_root_password, :roles => :db do
+        if cfg[:mysql_root_password]
+          begin
+            run %{mysql -u root -e "UPDATE mysql.user SET Password=PASSWORD('#{cfg[:mysql_root_password]}') WHERE User='root'; FLUSH PRIVILEGES;"}
+          rescue Exception => e
+            #most likely because the password was already set
+            #in that case this is fine to swallow the error because the task is 'set' db password, not reset it.... we would have to know
+            #what the old root password was
+          end
+        end
+      end
+      
+      desc <<-DESC
+        Dump the MySQL database to ebs (if enabled) or the S3 bucket specified by \
+        ec2onrails_config[:archive_to_bucket]. The filename will be \
+        "database-archive/<timestamp>/dump.sql.gz".
+      DESC
+      task :archive, :roles => :db do
+        run "/usr/local/ec2onrails/bin/backup_app_db --bucket #{cfg[:archive_to_bucket]} --dir #{cfg[:archive_to_bucket_subdir]}"
+      end
+      
+      desc <<-DESC
+        Restore the MySQL database from the S3 bucket specified by \
+        ec2onrails_config[:restore_from_bucket]. The archive filename is \
+        expected to be the default, "mysqldump.sql.gz".
+      DESC
+      task :restore, :roles => :db do
+        run "/usr/local/ec2onrails/bin/restore_app_db --bucket #{cfg[:restore_from_bucket]} --dir #{cfg[:restore_from_bucket_subdir]}"
+      end
+      
+      desc <<-DESC
+        [internal] Initialize the default backup folder on S3 (i.e. do a full
+        backup of the newly-created db so the automatic incremental backups 
+        make sense).  NOTE: Only of use if you do not have ebs enabled
+      DESC
+      task :init_backup, :roles => :db do
+        server.allow_sudo do
+          sudo "/usr/local/ec2onrails/bin/backup_app_db --reset"
+        end
+      end
+      
+      # do NOT run if the flag does not exist.  This is placed by a startup script
+      # and it is only run on the first-startup.  This means after the db has been
+      # optimized, this task will not work again.  
+      #
+      # Of course you can overload it or call the file directly
+      task :optimize, :roles => :db do
+        if !quiet_capture("test -e /tmp/optimize_db_flag && echo 'file exists'").empty?
+          ec2onrails.server.allow_sudo do
+            begin
+              sudo "/usr/local/ec2onrails/bin/optimize_mysql"
+            ensure
+              sudo "rm -rf /tmp/optimize_db_flag" #remove so we cannot run again
+            end
+          end
+        else
+          puts "skipping as it looks like this task has already been run"
+        end
+      end
+      
+    end
+
+  end
+end
+