knife-server 1.1.0 → 1.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.cane +1 -0
- data/.rspec +1 -0
- data/.rubocop.yml +3 -0
- data/.travis.yml +12 -8
- data/CHANGELOG.md +32 -1
- data/Gemfile +9 -4
- data/Guardfile +28 -0
- data/README.md +28 -5
- data/Rakefile +31 -10
- data/knife-server.gemspec +18 -8
- data/lib/chef/knife/bootstrap/_omnibus.sh +63 -10
- data/lib/chef/knife/bootstrap/chef10/rhel.erb +2 -0
- data/lib/chef/knife/bootstrap/chef11/omnibus.erb +4 -1
- data/lib/chef/knife/bootstrap/chef11/rhel.erb +2 -0
- data/lib/chef/knife/server_backup.rb +24 -10
- data/lib/chef/knife/server_bootstrap_base.rb +68 -23
- data/lib/chef/knife/server_bootstrap_ec2.rb +33 -20
- data/lib/chef/knife/server_bootstrap_linode.rb +20 -13
- data/lib/chef/knife/server_bootstrap_openstack.rb +128 -0
- data/lib/chef/knife/server_bootstrap_standalone.rb +28 -16
- data/lib/chef/knife/server_restore.rb +23 -9
- data/lib/knife-server.rb +1 -0
- data/lib/knife/server/credentials.rb +78 -42
- data/lib/knife/server/ec2_security_group.rb +24 -21
- data/lib/knife/server/ssh.rb +54 -18
- data/lib/knife/server/version.rb +2 -1
- data/spec/chef/knife/server_backup_spec.rb +58 -44
- data/spec/chef/knife/server_bootstrap_ec2_spec.rb +108 -80
- data/spec/chef/knife/server_bootstrap_linode_spec.rb +93 -64
- data/spec/chef/knife/server_bootstrap_openstack_spec.rb +305 -0
- data/spec/chef/knife/server_bootstrap_standalone_spec.rb +113 -76
- data/spec/chef/knife/server_restore_spec.rb +38 -37
- data/spec/knife/server/credientials_spec.rb +248 -51
- data/spec/knife/server/ec2_security_group_spec.rb +76 -68
- data/spec/knife/server/ssh_spec.rb +138 -22
- metadata +107 -31
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA1:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 27f50b0e90320e91ee8aa88d87c08dbf570f856e
|
4
|
+
data.tar.gz: deabf7cb66885f2566953221cfa843753e6b7aad
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: ae51fa3de1500febc09772c79edc354db518afb0e42b5c649db0fc7e2e5e3c50517b48c7499c1f5677044c6580ba8319d694f9dfe9cd10a92ef029262efa3962
|
7
|
+
data.tar.gz: 21b67c8ca3a1e0ce7f54bd600d9a8c9999a711ccfa23c660515403434608efdf73b423b06acf717f0879c20a6987c16ede9da701bd3a5b376df126f50e183a82
|
data/.cane
ADDED
@@ -0,0 +1 @@
|
|
1
|
+
--abc-exclude Knife::Server::SSH#exec_ssh
|
data/.rspec
CHANGED
data/.rubocop.yml
ADDED
data/.travis.yml
CHANGED
@@ -1,15 +1,19 @@
|
|
1
1
|
language: ruby
|
2
|
+
|
2
3
|
rvm:
|
3
|
-
- 1
|
4
|
-
- 2.0.0
|
5
|
-
- 1.9.
|
6
|
-
- ruby-head
|
4
|
+
- 2.1
|
5
|
+
- 2.0.0
|
6
|
+
- 1.9.3
|
7
|
+
- ruby-head
|
7
8
|
|
8
9
|
env:
|
9
|
-
- "CHEF_VERSION=
|
10
|
-
- "CHEF_VERSION=
|
11
|
-
- "CHEF_VERSION=
|
10
|
+
- "CHEF_VERSION="
|
11
|
+
- "CHEF_VERSION='~> 11.14.2'"
|
12
|
+
- "CHEF_VERSION='~> 11.4.4'"
|
13
|
+
- "CHEF_VERSION='~> 10.26'"
|
14
|
+
|
15
|
+
bundler_args: --without guard
|
12
16
|
|
13
17
|
matrix:
|
14
18
|
allow_failures:
|
15
|
-
|
19
|
+
- rvm: ruby-head
|
data/CHANGELOG.md
CHANGED
@@ -1,3 +1,26 @@
|
|
1
|
+
## 1.2.0 / 2014-09-13
|
2
|
+
|
3
|
+
### Upstream changes
|
4
|
+
|
5
|
+
* Pull request [#48][], issue [#50][]: Fix issue affecting newer Knife/Chef versions dealing with nil default options. ([@dldinternet][], [@fnichol][])
|
6
|
+
* Patch specific versions of Chef to fix `knife configure` bug. ([@fnichol][])
|
7
|
+
|
8
|
+
### New features
|
9
|
+
|
10
|
+
* Pull request [#51][]: Add OpenStack support to knife-server command. ([@johnbellone][])
|
11
|
+
* Re-use existing private user key for omnibus bootstraps. ([@fnichol][])
|
12
|
+
* Add support for downloading packages from a URL using the `--url` flag. ([@fnichol][])
|
13
|
+
|
14
|
+
### Improvements
|
15
|
+
|
16
|
+
* Pull request [#43][]: Enable ssh on firewall. ([@taylor][])
|
17
|
+
* Add output when backing up and writing keys locally. ([@fnichol][])
|
18
|
+
* Issue [#28][]: Shunt stderr/ioctl warnings to a tmp log file for knife configure. ([@fnichol][])
|
19
|
+
* Issue [#9][], issue [#10][]: Validate that node_name & client_key are set when running plugins, giving the user a hint that their local knife.rb is not currently set up correctly. ([@fnichol][])
|
20
|
+
* Update download URL for Omnibus packages. ([@fnichol][])
|
21
|
+
* Update testing dependencies, upgrade to RSpec 3.x, freshen TravisCI build matrix, add style and complexity support. ([@fnichol][])
|
22
|
+
|
23
|
+
|
1
24
|
## 1.1.0 / 2013-07-26
|
2
25
|
|
3
26
|
### New features
|
@@ -161,18 +184,26 @@ The initial release.
|
|
161
184
|
[#11]: https://github.com/fnichol/knife-server/issues/11
|
162
185
|
[#13]: https://github.com/fnichol/knife-server/issues/13
|
163
186
|
[#15]: https://github.com/fnichol/knife-server/issues/15
|
187
|
+
[#28]: https://github.com/fnichol/knife-server/issues/28
|
164
188
|
[#29]: https://github.com/fnichol/knife-server/issues/29
|
165
189
|
[#34]: https://github.com/fnichol/knife-server/issues/34
|
166
190
|
[#35]: https://github.com/fnichol/knife-server/issues/35
|
167
191
|
[#41]: https://github.com/fnichol/knife-server/issues/41
|
168
192
|
[#42]: https://github.com/fnichol/knife-server/issues/42
|
193
|
+
[#43]: https://github.com/fnichol/knife-server/issues/43
|
194
|
+
[#48]: https://github.com/fnichol/knife-server/issues/48
|
195
|
+
[#50]: https://github.com/fnichol/knife-server/issues/50
|
196
|
+
[#51]: https://github.com/fnichol/knife-server/issues/51
|
169
197
|
[@danryan]: https://github.com/danryan
|
198
|
+
[@dldinternet]: https://github.com/dldinternet
|
170
199
|
[@erikh]: https://github.com/erikh
|
171
200
|
[@fnichol]: https://github.com/fnichol
|
172
201
|
[@iafonov]: https://github.com/iafonov
|
202
|
+
[@johnbellone]: https://github.com/johnbellone
|
173
203
|
[@jssjr]: https://github.com/jssjr
|
174
204
|
[@ranjib]: https://github.com/ranjib
|
175
205
|
[@sawanoboly]: https://github.com/sawanoboly
|
176
206
|
[@stormsilver]: https://github.com/stormsilver
|
207
|
+
[@taylor]: https://github.com/taylor
|
177
208
|
[@wpeterson]: https://github.com/wpeterson
|
178
|
-
[@xdissent]: https://github.com/xdissent
|
209
|
+
[@xdissent]: https://github.com/xdissent
|
data/Gemfile
CHANGED
@@ -1,11 +1,16 @@
|
|
1
|
-
|
1
|
+
# -*- encoding: utf-8 -*-
|
2
|
+
source "https://rubygems.org"
|
2
3
|
|
3
4
|
# Specify your gem's dependencies in knife-server.gemspec
|
4
5
|
gemspec
|
5
6
|
|
6
|
-
group :
|
7
|
-
gem
|
7
|
+
group :guard do
|
8
|
+
gem "guard-rspec"
|
9
|
+
gem "guard-rubocop"
|
10
|
+
gem "guard-cane"
|
11
|
+
end
|
8
12
|
|
13
|
+
group :test do
|
9
14
|
# allow CI to override the version of Chef for matrix testing
|
10
|
-
gem
|
15
|
+
gem "chef", (ENV["CHEF_VERSION"] || ">= 0.10.10")
|
11
16
|
end
|
data/Guardfile
ADDED
@@ -0,0 +1,28 @@
|
|
1
|
+
# -*- encoding: utf-8 -*-
|
2
|
+
ignore %r{^\.gem/}
|
3
|
+
|
4
|
+
def rspec_opts
|
5
|
+
{ :cmd => "bundle exec rspec" }
|
6
|
+
end
|
7
|
+
|
8
|
+
def rubocop_opts
|
9
|
+
{ :all_on_start => false, :keep_failed => false, :cli => "-r finstyle -D" }
|
10
|
+
end
|
11
|
+
|
12
|
+
group :red_green_refactor, :halt_on_fail => true do
|
13
|
+
guard :rspec, rspec_opts do
|
14
|
+
watch(%r{^spec/(.*)_spec\.rb})
|
15
|
+
watch(%r{^lib/(.*)([^/]+)\.rb}) { |m| "spec/#{m[1]}#{m[2]}_spec.rb" }
|
16
|
+
watch(%r{^spec/spec_helper\.rb}) { "spec" }
|
17
|
+
end
|
18
|
+
|
19
|
+
guard :cane do
|
20
|
+
watch(%r{.*\.rb})
|
21
|
+
watch(".cane")
|
22
|
+
end
|
23
|
+
|
24
|
+
guard :rubocop, rubocop_opts do
|
25
|
+
watch(%r{.+\.rb$})
|
26
|
+
watch(%r{(?:.+/)?\.rubocop\.yml$}) { |m| File.dirname(m[0]) }
|
27
|
+
end
|
28
|
+
end
|
data/README.md
CHANGED
@@ -20,7 +20,7 @@ $ knife server bootstrap ec2 \
|
|
20
20
|
--aws-secret-access-key $AWS_SECRET_ACCESS_KEY \
|
21
21
|
--region us-east-1 \
|
22
22
|
--availability-zone us-east-1b \
|
23
|
-
--image ami-
|
23
|
+
--image ami-d017b2b8 \
|
24
24
|
--ssh-user ubuntu \
|
25
25
|
--flavor m1.small \
|
26
26
|
--ssh-key id_rsa-aws \
|
@@ -46,7 +46,19 @@ knife server bootstrap linode \
|
|
46
46
|
--linode-api-key $LINODE_API_KEY \
|
47
47
|
--linode-datacenter 3 \
|
48
48
|
--linode-flavor 1 \
|
49
|
-
--linode-image
|
49
|
+
--linode-image 126 \
|
50
|
+
--ssh-password 'testing1234'
|
51
|
+
```
|
52
|
+
|
53
|
+
To spin up your Chef Server on [OpenStack][openstack]:
|
54
|
+
|
55
|
+
```bash
|
56
|
+
knife server bootstrap openstack \
|
57
|
+
--node-name openstack.example.com \
|
58
|
+
--openstack-node-name openstack \
|
59
|
+
--openstack-username $OS_USERNAME \
|
60
|
+
--openstack-password $OS_PASSWORD \
|
61
|
+
--openstack-auth-url $OS_AUTH_URL \
|
50
62
|
--ssh-password 'testing1234'
|
51
63
|
```
|
52
64
|
|
@@ -159,12 +171,12 @@ that if you do not explicitly set `client_key` and `validation_key`, the
|
|
159
171
|
|
160
172
|
For example, you could add lines similar to the following in your user's
|
161
173
|
`~/.chef/knife.rb` or your project's `.chef/knife.rb` file (assuming you
|
162
|
-
have a directory `"$HOME/.chef
|
174
|
+
have a directory `"$HOME/.chef"` created with `mkdir -p $HOME/.chef`):
|
163
175
|
|
164
176
|
```ruby
|
165
177
|
node_name "gramsay"
|
166
|
-
client_key "#{ENV['HOME']}/.chef
|
167
|
-
validation_key "#{ENV['HOME']}/.chef
|
178
|
+
client_key "#{ENV['HOME']}/.chef/gramsay.pem"
|
179
|
+
validation_key "#{ENV['HOME']}/.chef/chef-validator.pem"
|
168
180
|
```
|
169
181
|
|
170
182
|
Most options can be passed to the knife subcommands explicitly but this
|
@@ -403,6 +415,15 @@ to make future cloud adapter support easier to add.
|
|
403
415
|
Provisions a Linode instance and sets up an Open Source Chef Server as
|
404
416
|
described [above](#knife-server-bootstrap).
|
405
417
|
|
418
|
+
### <a name="knife-server-bootstrap-openstack"></a> knife server bootstrap openstack
|
419
|
+
|
420
|
+
**Note:** You must install the [knife-openstack gem][knife-openstack] to use this
|
421
|
+
subcommand. This was done to keep the dependencies of this library lighter and
|
422
|
+
to make future cloud adapter support easier to add.
|
423
|
+
|
424
|
+
Provisions a Openstack instance and sets up an Open Source Chef Server as
|
425
|
+
described [above](#knife-server-bootstrap).
|
426
|
+
|
406
427
|
#### Configuration
|
407
428
|
|
408
429
|
This subcommand imports all relavent options from the knife-linode gem. For
|
@@ -622,5 +643,7 @@ Apache License, Version 2.0 (see [LICENSE][license])
|
|
622
643
|
[install_chef]: http://www.opscode.com/chef/install/
|
623
644
|
[knife-ec2]: https://github.com/opscode/knife-ec2
|
624
645
|
[knife-linode]: https://github.com/opscode/knife-linode
|
646
|
+
[knife-openstack]: https://github.com/opscode/knife-openstack
|
625
647
|
[stevendanna]: https://github.com/stevendanna
|
626
648
|
[vagrant_site]: http://vagrantup.com/
|
649
|
+
[openstack]: http://openstack.org
|
data/Rakefile
CHANGED
@@ -1,16 +1,37 @@
|
|
1
|
-
|
1
|
+
# -*- encoding: utf-8 -*-
|
2
|
+
|
2
3
|
require "bundler/gem_tasks"
|
3
4
|
|
4
|
-
|
5
|
-
|
5
|
+
require "rspec/core/rake_task"
|
6
|
+
desc "Run all specs in spec directory"
|
7
|
+
RSpec::Core::RakeTask.new(:spec) do |t|
|
8
|
+
t.pattern = "spec/**/*_spec.rb"
|
9
|
+
end
|
6
10
|
|
7
|
-
|
11
|
+
desc "Run all test suites"
|
12
|
+
task :test => [:spec]
|
8
13
|
|
9
|
-
|
10
|
-
|
11
|
-
|
12
|
-
|
14
|
+
require "finstyle"
|
15
|
+
require "rubocop/rake_task"
|
16
|
+
RuboCop::RakeTask.new(:style) do |task|
|
17
|
+
task.options << "--display-cop-names"
|
18
|
+
end
|
13
19
|
|
14
|
-
|
15
|
-
|
20
|
+
require "cane/rake_task"
|
21
|
+
desc "Run cane to check quality metrics"
|
22
|
+
Cane::RakeTask.new do |cane|
|
23
|
+
cane.canefile = "./.cane"
|
16
24
|
end
|
25
|
+
|
26
|
+
desc "Display LOC stats"
|
27
|
+
task :stats do
|
28
|
+
puts "\n## Production Code Stats"
|
29
|
+
sh "countloc -r lib"
|
30
|
+
puts "\n## Test Code Stats"
|
31
|
+
sh "countloc -r spec"
|
32
|
+
end
|
33
|
+
|
34
|
+
desc "Run all quality tasks"
|
35
|
+
task :quality => [:cane, :style, :stats]
|
36
|
+
|
37
|
+
task :default => [:test, :quality]
|
data/knife-server.gemspec
CHANGED
@@ -1,30 +1,40 @@
|
|
1
1
|
# -*- encoding: utf-8 -*-
|
2
|
-
require File.expand_path(
|
2
|
+
require File.expand_path("../lib/knife/server/version", __FILE__)
|
3
|
+
require "English"
|
3
4
|
|
4
5
|
Gem::Specification.new do |gem|
|
5
6
|
gem.authors = ["Fletcher Nichol"]
|
6
7
|
gem.email = ["fnichol@nichol.ca"]
|
7
|
-
gem.summary =
|
8
|
+
gem.summary = "Chef Knife plugin to bootstrap Chef Servers"
|
8
9
|
gem.description = gem.summary
|
9
10
|
gem.homepage = "http://fnichol.github.com/knife-server"
|
10
11
|
|
11
|
-
gem.files = `git ls-files`.split(
|
12
|
-
gem.executables = gem.files.grep(%r{^bin/}).map{ |f| File.basename(f) }
|
12
|
+
gem.files = `git ls-files`.split($INPUT_RECORD_SEPARATOR)
|
13
|
+
gem.executables = gem.files.grep(%r{^bin/}).map { |f| File.basename(f) }
|
13
14
|
gem.test_files = gem.files.grep(%r{^(test|spec|features)/})
|
14
15
|
gem.name = "knife-server"
|
15
16
|
gem.require_paths = ["lib"]
|
16
17
|
gem.version = Knife::Server::VERSION
|
17
18
|
|
18
|
-
gem.required_ruby_version = ">= 1.9.
|
19
|
+
gem.required_ruby_version = ">= 1.9.3"
|
19
20
|
|
20
|
-
gem.add_dependency "fog"
|
21
|
+
gem.add_dependency "fog"
|
21
22
|
gem.add_dependency "net-ssh"
|
22
23
|
gem.add_dependency "chef", ">= 0.10.10"
|
23
24
|
|
25
|
+
gem.add_development_dependency "rake"
|
24
26
|
gem.add_development_dependency "knife-ec2", ">= 0.5.12"
|
25
27
|
gem.add_development_dependency "knife-linode"
|
28
|
+
gem.add_development_dependency "knife-openstack"
|
26
29
|
|
27
|
-
gem.add_development_dependency "rspec", "~>
|
28
|
-
gem.add_development_dependency "fakefs", "~> 0.4
|
30
|
+
gem.add_development_dependency "rspec", "~> 3.0"
|
31
|
+
gem.add_development_dependency "fakefs", "~> 0.4"
|
29
32
|
gem.add_development_dependency "timecop", "~> 0.3"
|
33
|
+
gem.add_development_dependency "countloc", "~> 0.4"
|
34
|
+
|
35
|
+
# style and complexity libraries are tightly version pinned as newer releases
|
36
|
+
# may introduce new and undesireable style choices which would be immediately
|
37
|
+
# enforced in CI
|
38
|
+
gem.add_development_dependency "finstyle", "1.2.0"
|
39
|
+
gem.add_development_dependency "cane", "2.6.2"
|
30
40
|
end
|
@@ -5,12 +5,16 @@
|
|
5
5
|
#
|
6
6
|
|
7
7
|
package_url() {
|
8
|
-
|
9
|
-
|
10
|
-
|
11
|
-
|
8
|
+
if [ -n "$url" ] ; then
|
9
|
+
echo "$url"
|
10
|
+
else
|
11
|
+
local base="http://www.getchef.com/chef/download-server"
|
12
|
+
if [ -n "$version" ] ; then
|
13
|
+
local v="&v=${version}"
|
14
|
+
fi
|
12
15
|
|
13
|
-
|
16
|
+
echo "${base}?p=${platform}&pv=${platform_version}&m=${machine}&prerelease=${prerelease}${v}"
|
17
|
+
fi
|
14
18
|
}
|
15
19
|
|
16
20
|
# Set the filename for a deb, based on version and machine
|
@@ -36,6 +40,16 @@ failed_download() {
|
|
36
40
|
exit 5
|
37
41
|
}
|
38
42
|
|
43
|
+
is_server_installed() {
|
44
|
+
if [ -f "/opt/chef-server/bin/chef-server-ctl" ] ; then
|
45
|
+
return 0
|
46
|
+
elif [ -f "/opt/opscode/bin/chef-server-ctl" ] ; then
|
47
|
+
return 0
|
48
|
+
else
|
49
|
+
return 1
|
50
|
+
fi
|
51
|
+
}
|
52
|
+
|
39
53
|
perform_download() {
|
40
54
|
case "$1" in
|
41
55
|
wget)
|
@@ -48,8 +62,8 @@ perform_download() {
|
|
48
62
|
}
|
49
63
|
|
50
64
|
download_package() {
|
51
|
-
if
|
52
|
-
info "Chef Server detected
|
65
|
+
if is_server_installed ; then
|
66
|
+
info "Chef Server detected, skipping download"
|
53
67
|
return 0
|
54
68
|
fi
|
55
69
|
|
@@ -72,8 +86,8 @@ download_package() {
|
|
72
86
|
}
|
73
87
|
|
74
88
|
install_package() {
|
75
|
-
if
|
76
|
-
info "Chef Server detected
|
89
|
+
if is_server_installed ; then
|
90
|
+
info "Chef Server detected, skipping installation"
|
77
91
|
return 0
|
78
92
|
fi
|
79
93
|
|
@@ -90,6 +104,43 @@ install_package() {
|
|
90
104
|
banner "Package installed"
|
91
105
|
}
|
92
106
|
|
107
|
+
detect_info() {
|
108
|
+
if [ -f "/opt/chef-server/bin/chef-server-ctl" ] ; then
|
109
|
+
server_root="/opt/chef-server"
|
110
|
+
elif [ -f "/opt/opscode/bin/chef-server-ctl" ] ; then
|
111
|
+
server_root="/opt/opscode"
|
112
|
+
fi
|
113
|
+
|
114
|
+
info "Chef Server detected in $server_root"
|
115
|
+
}
|
116
|
+
|
117
|
+
patch_knife_code() {
|
118
|
+
local check="((Gem::Version.new(Chef::VERSION) <= Gem::Version.new(\"11.12.2\")) || (Gem::Version.new(Chef::VERSION) >= Gem::Version.new(\"11.6.0\"))) ? exit(0) : exit(1)"
|
119
|
+
local gems="$server_root/embedded/lib/ruby/gems/1.9.1/gems"
|
120
|
+
local patched="$gems/.patched"
|
121
|
+
|
122
|
+
if [ -f "$patched" ]; then
|
123
|
+
info "Patched knife configure detected, skipping"
|
124
|
+
elif echo "$script" | $server_root/embedded/bin/ruby -r chef/version; then
|
125
|
+
info "Patching knife configure bug (CHEF-5211)"
|
126
|
+
(cd $gems/chef-11.* && cat <<PATCH | tr "#" "\047" | patch -p1)
|
127
|
+
diff --git a/lib/chef/knife/configure.rb b/lib/chef/knife/configure.rb
|
128
|
+
index 6af3d4e..2c77bf1 100644
|
129
|
+
--- a/lib/chef/knife/configure.rb
|
130
|
+
+++ b/lib/chef/knife/configure.rb
|
131
|
+
@@ -153,6 +153,7 @@ EOH
|
132
|
+
|
133
|
+
def guess_servername
|
134
|
+
o = Ohai::System.new
|
135
|
+
+ o.load_plugins
|
136
|
+
o.require_plugin #os#
|
137
|
+
o.require_plugin #hostname#
|
138
|
+
o[:fqdn] || #localhost#
|
139
|
+
PATCH
|
140
|
+
touch "$patched"
|
141
|
+
fi
|
142
|
+
}
|
143
|
+
|
93
144
|
prepare_chef_server_rb() {
|
94
145
|
local config_file="/etc/chef-server/chef-server.rb"
|
95
146
|
|
@@ -112,7 +163,7 @@ CHEF_SERVER
|
|
112
163
|
symlink_binaries() {
|
113
164
|
for bin in chef-client chef-solo chef-apply knife ohai ; do
|
114
165
|
banner "Updating /usr/bin/$bin symlink"
|
115
|
-
ln -snf /
|
166
|
+
ln -snf $server_root/embedded/bin/$bin /usr/bin/$bin
|
116
167
|
done ; unset bin
|
117
168
|
}
|
118
169
|
|
@@ -132,5 +183,7 @@ configure_firewall() {
|
|
132
183
|
if [ -x "/usr/sbin/lokkit" ] ; then
|
133
184
|
banner "Opening TCP port 443"
|
134
185
|
/usr/sbin/lokkit -p 443:tcp
|
186
|
+
banner "Opening SSH port 22"
|
187
|
+
/usr/sbin/lokkit -p 22:tcp
|
135
188
|
fi
|
136
189
|
}
|