le1t0-deprec 2.1.6.001

data/lib/deprec/recipes/lvm.rb

@@ -0,0 +1,20 @@
+# Copyright 2006-2008 by Mike Bailey. All rights reserved.
+Capistrano::Configuration.instance(:must_exist).load do 
+  namespace :deprec do
+    namespace :lvm do
+      
+      task :pvdisplay do
+        sudo "pvdisplay"
+      end
+      
+      task :vgdisplay do
+        sudo "vgdisplay"
+      end
+      
+      task :lvdisplay do
+        sudo "lvdisplay"
+      end
+      
+    end
+  end
+end

data/lib/deprec/recipes/memcache.rb

@@ -0,0 +1,49 @@
+# Copyright 2006-2008 by Mike Bailey. All rights reserved.
+Capistrano::Configuration.instance(:must_exist).load do 
+  namespace :deprec do
+    namespace :memcache do
+      
+  set :memcache_ip, '127.0.0.1'
+  set :memcache_port, 11211
+  set :memcache_memory, 256
+  
+  # XXX needs thought/work
+  task :memcached_start do
+    run "memcached -d -m #{memcache_memory} -l #{memcache_ip} -p #{memcache_port}"
+  end
+  
+  # XXX needs thought/work
+  task :memcached_stop do
+    run "killall memcached"
+  end
+  
+  # XXX needs thought/work
+  task :memcached_restart do
+    memcached_stop
+    memcached_start
+  end
+  
+  task :install_memcached do
+    version = 'memcached-1.2.2'
+    set :src_package, {
+      :file => version + '.tar.gz',   
+      :md5sum => 'a08851f7fa7b15e92ee6320b7a79c321  memcached-1.2.2.tar.gz', 
+      :dir => version,  
+      :url => "http://www.danga.com/memcached/dist/#{version}.tar.gz",
+      :unpack => "tar zxf #{version}.tar.gz;",
+      :configure => %w{
+        ./configure
+        --prefix=/usr/local 
+        ;
+        }.reject{|arg| arg.match '#'}.join(' '),
+      :make => 'make;',
+      :install => 'make install;',
+      :post_install => 'install -b scripts/memcached-init /etc/init.d/memcached;'
+    }
+    apt.install( {:base => %w(libevent-dev)}, :stable )
+    deprec.download_src(src_package, src_dir)
+    deprec.install_from_src(src_package, src_dir)
+  end
+end end
+  
+end

data/lib/deprec/recipes/mongodb.rb

@@ -0,0 +1,94 @@
+# Copyright 2006-2010 by joost@github. All rights reserved.
+Capistrano::Configuration.instance(:must_exist).load do 
+  namespace :deprec do 
+    namespace :mongodb do
+      
+      SRC_PACKAGES[:mongodb] = {
+        :filename => 'mongodb-src-r1.4.0.tar.gz',   
+        :dir => 'mongodb-src-r1.4.0',  
+        :url => "http://downloads.mongodb.org/src/mongodb-src-r1.4.0.tar.gz",
+        :unpack => "tar zxf mongodb-src-r1.4.0.tar.gz;",
+        :configure => '',
+        :make => 'scons all;',
+        :install => 'scons --prefix=/usr/local/mongo install;'
+      }
+      
+      # Installs MongoDB on Ubuntu 8.04. 
+      # Still gives:
+      #  warning built with boost version 1.34 or older - limited concurrency
+      desc "install MongoDB"
+      task :install, :roles => :mongodb do
+        install_deps
+        deprec2.download_src(SRC_PACKAGES[:mongodb], src_dir)
+        deprec2.install_from_src(SRC_PACKAGES[:mongodb], src_dir)
+        sudo 'mkdir -p /var/lib/mongodb' # Data dir, also pid/lock file is in there (see init.d script)
+      end
+
+      # Install dependencies for MongoDB
+      task :install_deps, :roles => :mongodb do
+        # See: http://www.mongodb.org/display/DOCS/Building+for+Linux
+        apt.install( {:base => %w(tcsh git-core scons g++)}, :stable )
+        apt.install( {:base => %w(libpcre++-dev libboost-dev libreadline-dev xulrunner-1.9-dev)}, :stable )
+        apt.install( {:base => %w(libboost-program-options-dev libboost-thread-dev libboost-filesystem-dev libboost-date-time-dev)}, :stable )
+      end
+
+      SYSTEM_CONFIG_FILES[:mongodb] = [
+
+        {:template => "mongodb-init.d",
+         :path => '/etc/init.d/mongodb',
+         :mode => 0755,
+         :owner => 'root:root'}
+        
+        ]
+      
+      PROJECT_CONFIG_FILES[:mongodb] = []
+
+      desc "Generate configuration files for mongodb from template(s)"
+      task :config_gen do
+        config_gen_system
+      end
+
+      task :config_gen_system do
+        SYSTEM_CONFIG_FILES[:mongodb].each do |file|
+          deprec2.render_template(:mongodb, file)
+        end
+      end
+
+      desc 'Deploy configuration files for mongodb' 
+      task :config, :roles => :mongodb do
+        config_system
+      end
+
+      task :config_system, :roles => :mongodb do
+        deprec2.append_to_file_if_missing('/etc/profile', 'export PATH=$PATH:/usr/local/mongo/bin')
+        deprec2.push_configs(:mongodb, SYSTEM_CONFIG_FILES[:mongodb])
+      end
+
+      desc 'Start mongodb via init.d script' 
+      task :start, :roles => :mongodb do
+        run "#{sudo} /etc/init.d/mongodb start"
+      end
+      
+      desc 'Stop mongodb via init.d script' 
+      task :stop, :roles => :mongodb do
+        run "#{sudo} /etc/init.d/mongodb stop"
+      end
+      
+      desc 'Restart mongodb via init.d script' 
+      task :restart, :roles => :mongodb do
+        run "#{sudo} /etc/init.d/mongodb restart"
+      end
+
+      desc 'Activate mongodb init.d script to start at boot' 
+      task :activate, :roles => :mongodb do
+        run "#{sudo} update-rc.d mongodb defaults"
+      end  
+      
+      desc 'Deactivate mongodb init.d script to NOT start at boot' 
+      task :deactivate, :roles => :mongodb do
+        run "#{sudo} update-rc.d -f mongodb remove"
+      end
+
+    end 
+  end
+end

data/lib/deprec/recipes/monit.rb

@@ -0,0 +1,135 @@
+# Copyright 2006-2008 by Mike Bailey. All rights reserved.
+Capistrano::Configuration.instance(:must_exist).load do 
+  namespace :deprec do 
+    namespace :monit do
+    
+  # We're using monit primarily to control Mongrel processes so 
+  # the tasks are restricted to :app. You may with to use it for
+  # other processes. In this case, specify HOSTS=hostname on the
+  # command line or use: 
+  #   for_roles(:role_name) { top.deprec.monit.task_name}
+  # in your recipes.
+        
+  set :monit_user,  'monit'
+  set :monit_group, 'monit'
+  set :monit_confd_dir, '/etc/monit.d'
+  
+  set :monit_check_interval, 60
+  set :monit_log, 'syslog facility log_daemon'
+  set :monit_mailserver, nil
+  set :monit_mail_from, 'monit@deprec.enabled.slice'
+  set :monit_alert_recipients, %w(root@localhost)
+  set :monit_timeout_recipients, %w(root@localhost)
+  set :monit_webserver_enabled, true
+  set :monit_webserver_port, 2812
+  set :monit_webserver_address, 'localhost'
+  set :monit_webserver_allowed_hosts_and_networks, %w(localhost)
+  set :monit_webserver_auth_user, 'admin'
+  set :monit_webserver_auth_pass, 'monit'
+  set :use_monit, true # FIXME: should be generic namespace monitoring, with :none option
+  
+  # Upstream changes: http://www.tildeslash.com/monit/dist/CHANGES.txt  
+  # Ubuntu package version = monit-4.8.1  
+  SRC_PACKAGES[:monit] = {
+    :md5sum => "4bbd3845ae1cbab13ec211824e0486dc  monit-5.1.1.tar.gz", 
+    :url => "http://mmonit.com/monit/dist/monit-5.1.1.tar.gz"
+  }
+  
+  desc "Install monit"
+  task :install, :roles => :app do
+    install_deps
+    deprec2.download_src(SRC_PACKAGES[:monit], src_dir)
+    deprec2.install_from_src(SRC_PACKAGES[:monit], src_dir)
+    # Initial push of system files - not kept locally
+    SYSTEM_CONFIG_FILES[:monit].each do |file|
+      deprec2.render_template(:monit, file.merge(:remote=>true))
+    end
+    activate
+  end
+  
+  # install dependencies for monit
+  task :install_deps, :roles => :app do
+    apt.install( {:base => %w(flex bison libssl-dev)}, :stable )
+  end
+    
+  SYSTEM_CONFIG_FILES[:monit] = [
+    
+    {:template => 'monit-init-script',
+     :path => '/etc/init.d/monit',
+     :mode => 0755,
+     :owner => 'root:root'},
+     
+    {:template => 'monitrc.erb',
+     :path => "/etc/monitrc",
+     :mode => 0700,
+     :owner => 'root:root'},
+      
+    {:template => 'nothing.monitrc',
+     :path => "/etc/monit.d/nothing.monitrc",
+     :mode => 0700,
+     :owner => 'root:root'}
+  ]
+  
+  desc <<-DESC
+  Generate monit config from template. Note that this does not
+  push the config to the server, it merely generates required
+  configuration files. These should be kept under source control.            
+  The can be pushed to the server with the :config task.
+  DESC
+  task :config_gen do
+    SYSTEM_CONFIG_FILES[:monit].each do |file|
+      deprec2.render_template(:monit, file)
+    end
+  end
+  
+  desc "Push monit config files to server"
+  task :config, :roles => :app do
+    deprec2.push_configs(:monit, SYSTEM_CONFIG_FILES[:monit])
+  end
+
+  desc "Start Monit"
+  task :start, :roles => :app do
+    send(run_method, "/etc/init.d/monit start")
+  end
+
+  desc "Stop Monit"
+  task :stop, :roles => :app  do
+    send(run_method, "/etc/init.d/monit stop")
+  end
+
+  desc "Restart Monit"
+  task :restart, :roles => :app  do
+    send(run_method, "/etc/init.d/monit restart")
+  end
+
+  desc "Reload Monit"
+  task :reload, :roles => :app  do
+    send(run_method, "/etc/init.d/monit reload")
+  end
+   
+  desc <<-DESC
+    Activate monit start scripts on server.
+    Setup server to start monit on boot.
+  DESC
+  task :activate, :roles => :app do
+    send(run_method, "update-rc.d monit defaults")
+  end
+  
+  desc <<-DESC
+    Dectivate monit start scripts on server.
+    Setup server to start monit on boot.
+  DESC
+  task :deactivate, :roles => :app do
+    send(run_method, "update-rc.d -f monit remove")
+  end
+  
+  task :backup do
+    # there's nothing to backup for monit
+  end
+  
+  task :restore do
+    # there's nothing to restore for monit
+  end
+
+  end end
+end

data/lib/deprec/recipes/mysql_proxy.rb

@@ -0,0 +1,67 @@
+# Copyright 2009-2010 by le1t0@github. All rights reserved.
+Capistrano::Configuration.instance(:must_exist).load do 
+  namespace :deprec do
+    namespace :mysql_proxy do
+  
+      set :mysql_proxy_backend_servers, [ '192.168.0.1' ]
+      set :mysql_proxy_read_only_backend_servers, [ '192.168.0.2', '192.168.0.3' ]
+  
+      desc "Install mysql_proxy on server"
+      task :install, :roles => :proxy do
+        install_deps
+        config
+        reactivate
+      end
+  
+      task :install_deps, :roles => :proxy do
+        apt.install( {:base => %w(mysql-proxy)}, :stable )
+      end
+  
+      SYSTEM_CONFIG_FILES[:mysql_proxy] = [
+        {:template => 'mysql-proxy-default.erb',
+         :path => '/etc/default/mysql-proxy',
+         :mode => 0644,
+         :owner => 'root:root'}
+      ]
+  
+      desc "Generate config files for mysql_proxy"
+      task :config_gen do
+        SYSTEM_CONFIG_FILES[:mysql_proxy].each do |file|
+          deprec2.render_template(:mysql_proxy, file)
+        end
+      end
+  
+      desc "Push mysql_proxy config files to server"
+      task :config, :roles => :proxy do
+        deprec2.push_configs(:mysql_proxy, SYSTEM_CONFIG_FILES[:mysql_proxy])
+      end
+
+      task :start, :roles => :proxy do
+        sudo "/etc/init.d/mysql-proxy start"
+      end
+
+      task :stop, :roles => :proxy do
+        sudo "/etc/init.d/mysql-proxy stop"
+      end
+  
+      task :restart do
+        stop
+        start
+      end
+
+      task :activate, :roles => :proxy do
+        sudo "update-rc.d mysql-proxy defaults"
+      end
+  
+      task :deactivate, :roles => :proxy do
+        sudo "update-rc.d -f mysql-proxy remove"
+      end
+  
+      task :reactivate do
+        deactivate
+        activate
+      end
+  
+    end
+  end
+end

data/lib/deprec/recipes/nagios.rb

@@ -0,0 +1,361 @@
+# Copyright 2006-2010 by Mike Bailey, le1t0@github. All rights reserved.
+Capistrano::Configuration.instance(:must_exist).load do 
+  namespace :deprec do
+    namespace :nagios do
+      
+      set :nagios_user, 'nagios'
+      set :nagios_group, 'nagios'
+      set(:nagios_host) { Capistrano::CLI.ui.ask "Enter hostname of nagios server" }
+      set(:nagios_ip) { Capistrano::CLI.ui.ask "Enter ip address of nagios server" }
+      set(:nagios_admin_pass) { Capistrano::CLI.ui.ask "Enter password for nagiosadmin user" }
+      set :nagios_cmd_group, 'nagcmd' # Submit external commands through the web interface
+      set :nagios_htpasswd_file, '/usr/local/nagios/etc/htpasswd.users'
+      # default :application, 'nagios' 
+      set :nagios_ssh_key, nil
+      
+      SRC_PACKAGES[:nagios] = {
+        :url => "http://prdownloads.sourceforge.net/sourceforge/nagios/nagios-3.2.0.tar.gz",
+        :md5sum => "3566167cc60ddeaad34e7d2e26ed4a58  nagios-3.2.0.tar.gz", 
+        :configure => "./configure --with-command-group=nagcmd;",
+        :make => 'make all;',
+        :install => 'make install install-init install-commandmode install-webconf;'
+      }
+      
+      desc "Install and configure Nagios server"
+      task :setup_server, :roles => :nagios do
+        install
+        top.deprec.nagios_plugins.install
+        top.deprec.nrpe.install
+        config_gen
+        config
+      end
+      
+      desc "Setup client"
+      task :setup_client do
+        top.deprec.nagios_plugins.install
+        top.deprec.nrpe.install
+        top.deprec.nrpe.config
+      end
+      
+      desc "Install nagios"
+      task :install, :roles => :nagios do
+        install_deps
+        create_nagios_user
+        deprec2.download_src(SRC_PACKAGES[:nagios], src_dir)
+        deprec2.install_from_src(SRC_PACKAGES[:nagios], src_dir)
+      end
+      
+      # Install dependencies for nagios
+      task :install_deps, :roles => :nagios do
+        apt.install( {:base => %w(apache2 mailx postfix libapache2-mod-php5 libgd2-xpm-dev)}, :stable )
+      end
+      
+      task :create_nagios_user, :roles => :nagios do
+        deprec2.groupadd(nagios_group)
+        deprec2.useradd(nagios_user, :group => nagios_group, :homedir => false)
+        # deprec2.add_user_to_group(nagios_user, apache_user)
+        deprec2.groupadd(nagios_cmd_group)
+        deprec2.add_user_to_group(nagios_user, nagios_cmd_group)
+        deprec2.add_user_to_group(apache_user, nagios_cmd_group)        
+      end
+      
+      desc "Grant a user access to the web interface"
+      task :htpass, :roles => :nagios do
+        target_user = Capistrano::CLI.ui.ask "Userid" do |q|
+          q.default = 'nagiosadmin'
+        end
+        system "htpasswd config/nagios/usr/local/nagios/etc/htpasswd.users #{target_user}"
+      end
+      
+      # desc "Set password for web based access"
+      # task :htpass do
+      #   target_user = Capistrano::CLI.ui.ask "Userid" do |q| 
+      #     q.default = 'nagiosadmin'
+      #   end
+      #   newpass = Capistrano::CLI.ui.ask "new password" do |q| 
+      #     q.echo = false 
+      #   end
+      #   sudo "htpasswd -b #{htpasswd_file} #{target_user} #{newpass}"
+      # end
+      
+      SYSTEM_CONFIG_FILES[:nagios] = [
+        
+        {:template => 'cgi.cfg.erb',
+        :path => '/usr/local/nagios/etc/cgi.cfg',
+        :mode => 0664,
+        :owner => 'nagios:nagios'},
+        
+        {:template => 'htpasswd.users',
+        :path => '/usr/local/nagios/etc/htpasswd.users',
+        :mode => 0660,
+        :owner => 'nagios:www-data'},
+        
+        {:template => 'nagios.cfg.erb',
+        :path => '/usr/local/nagios/etc/nagios.cfg',
+        :mode => 0664,
+        :owner => 'nagios:nagios'},
+        
+        {:template => 'resource.cfg.erb',
+        :path => '/usr/local/nagios/etc/resource.cfg',
+        :mode => 0660,
+        :owner => 'nagios:nagios'},
+        
+        {:template => 'objects/commands.cfg.erb',
+        :path => '/usr/local/nagios/etc/objects/commands.cfg',
+        :mode => 0664,
+        :owner => 'nagios:nagios'},
+        
+        {:template => 'objects/contacts.cfg.erb',
+        :path => '/usr/local/nagios/etc/objects/contacts.cfg',
+        :mode => 0664,
+        :owner => 'nagios:nagios'},
+        
+        {:template => 'objects/hosts.cfg.erb',
+        :path => '/usr/local/nagios/etc/objects/hosts.cfg',
+        :mode => 0664,
+        :owner => 'nagios:nagios'},
+        
+        {:template => 'objects/localhost.cfg.erb',
+         :path => '/usr/local/nagios/etc/objects/localhost.cfg',
+         :mode => 0664,
+         :owner => 'nagios:nagios'},
+         
+        {:template => 'objects/services.cfg.erb',
+         :path => '/usr/local/nagios/etc/objects/services.cfg',
+         :mode => 0664,
+         :owner => 'nagios:nagios'},
+        
+        {:template => 'objects/timeperiods.cfg.erb',
+         :path => '/usr/local/nagios/etc/objects/timeperiods.cfg',
+         :mode => 0664,
+         :owner => 'nagios:nagios'}
+      
+      ]
+
+      desc "Generate configuration file(s) for nagios from template(s)"
+      task :config_gen do
+        SYSTEM_CONFIG_FILES[:nagios].each do |file|
+          deprec2.render_template(:nagios, file)
+        end
+      end
+      
+      desc "Push nagios config files to server"
+      task :config, :roles => :nagios do
+        default :application, 'nagios'
+        deprec2.push_configs(:nagios, SYSTEM_CONFIG_FILES[:nagios])
+        config_check
+        restart
+      end
+      
+      desc "Run Nagios config check"
+      task :config_check, :roles => :nagios do
+        send(run_method, "/usr/local/nagios/bin/nagios -v /usr/local/nagios/etc/nagios.cfg")
+      end
+      
+      # desc "Set Nagios to start on boot"
+      # task :activate, :roles => :nagios do
+      #   send(run_method, "update-rc.d nagios defaults")
+      #   sudo "a2ensite nagios"
+      #   top.deprec.apache.reload
+      # end
+      # 
+      # desc "Set Nagios to not start on boot"
+      # task :deactivate, :roles => :nagios do
+      #   send(run_method, "update-rc.d -f nagios remove")
+      #   sudo "a2dissite nagios"
+      #   top.deprec.apache.reload
+      # end
+      
+      # Control
+
+      desc "Start Nagios"
+      task :start, :roles => :nagios do
+        send(run_method, "/etc/init.d/nagios start")
+      end
+
+      desc "Stop Nagios"
+      task :stop, :roles => :nagios do
+        send(run_method, "/etc/init.d/nagios stop")
+      end
+
+      desc "Restart Nagios"
+      task :restart, :roles => :nagios do
+        send(run_method, "/etc/init.d/nagios restart")
+      end
+
+      desc "Reload Nagios"
+      task :reload, :roles => :nagios do
+        send(run_method, "/etc/init.d/nagios reload")
+      end
+      
+      task :backup, :roles => :web do
+        # not yet implemented
+      end
+      
+      task :restore, :roles => :web do
+        # not yet implemented
+      end
+    
+    end
+    
+    SRC_PACKAGES[:nagios_plugins] = {
+      :url => "http://prdownloads.sourceforge.net/sourceforge/nagiosplug/nagios-plugins-1.4.14.tar.gz",
+      :md5sum => "a1835a48a777863ed2583de3c82446a9  nagios-plugins-1.4.14.tar.gz", 
+      :configure => "./configure --with-nagios-user=#{nagios_user} --with-nagios-group=#{nagios_group};",
+    }   
+          
+    namespace :nagios_plugins do
+    
+      desc "Install nagios plugins"
+      task :install do
+        install_deps
+        create_nagios_user
+        deprec2.download_src(SRC_PACKAGES[:nagios_plugins], src_dir)
+        deprec2.install_from_src(SRC_PACKAGES[:nagios_plugins], src_dir)        
+      end
+      
+      desc "Install user plugins for nagios from config/nagios_plugins/plugins in user's project"
+      task :install_custom do
+        remote_path = File.join('/', 'usr', 'local', 'nagios', 'libexec')
+        plugins_path = File.join('config', 'nagios_plugins', 'plugins')
+        Dir.new(plugins_path).entries.each do |entry|
+          remote_plugin = File.join(remote_path, entry)
+          plugin = File.join(plugins_path, entry)
+          if File.file?(plugin)
+            std.su_put File.read(plugin), remote_plugin, '/tmp', :mode => 0755
+          end
+        end
+      end
+
+      desc "configure ssh + sudo access for nagios_user"
+      task :config_access do
+        deprec2.append_to_file_if_missing('/etc/sudoers', "#{nagios_user} ALL=(root) NOPASSWD:/usr/bin/killall")
+        deprec2.append_to_file_if_missing('/etc/sudoers', "#{nagios_user} ALL=(root) NOPASSWD:/bin/kill")
+        deprec2.append_to_file_if_missing('/etc/sudoers', "#{nagios_user} ALL=(root) NOPASSWD:/sbin/iptables")
+        deprec2.append_to_file_if_missing('/etc/sudoers', "#{nagios_user} ALL=(root) NOPASSWD:/bin/cat")
+        sudo "mkdir -p /home/#{nagios_user}/.ssh"
+        sudo "chmod 700 /home/#{nagios_user}/.ssh"
+        if nagios_ssh_key
+          sudo "echo '#{nagios_ssh_key}' >> /tmp/authorized_keys_file_for_nagios_user.tmp"
+        end
+        sudo "mv /tmp/authorized_keys_file_for_nagios_user.tmp /home/#{nagios_user}/.ssh/authorized_keys"
+        sudo "chmod 600 /home/#{nagios_user}/.ssh/authorized_keys"
+        sudo "chown -R nagios:nagios /home/#{nagios_user}/.ssh"
+      end
+
+      # Install dependencies for nagios plugins
+      task :install_deps do
+        apt.install( {:base => %w(libmysqlclient15-dev)}, :stable )
+      end
+      
+      task :create_nagios_user do
+        deprec2.groupadd(nagios_group)
+        deprec2.useradd(nagios_user, :group => nagios_group, :homedir => false)
+        # deprec2.add_user_to_group(nagios_user, apache_user)
+        deprec2.groupadd(nagios_cmd_group)
+        deprec2.add_user_to_group(nagios_user, nagios_cmd_group)
+        deprec2.add_user_to_group(apache_user, nagios_cmd_group)        
+      end
+      
+      
+    end
+    
+
+    namespace :nrpe do
+      
+      default :nrpe_enable_command_args, false # set to true to compile nrpe to accept arguments
+	                                       # note that you'll need to set it before these recipes are loaded (e.g. in .caprc)
+      
+      SRC_PACKAGES[:nrpe] = {
+        :url => "http://downloads.sourceforge.net/nagios/nrpe-2.12.tar.gz",
+        :md5sum => "b2d75e2962f1e3151ef58794d60c9e97  nrpe-2.12.tar.gz", 
+        :configure => "./configure --with-nagios-user=#{nagios_user} --with-nagios-group=#{nagios_group} #{ '--enable-command-args' if nrpe_enable_command_args};",
+        :make => 'make all;',
+        :install => 'make install-plugin; make install-daemon; make install-daemon-config;'
+      }
+    
+      desc 'Install NRPE'
+      task :install do
+        install_deps
+        create_nagios_user
+        deprec2.download_src(SRC_PACKAGES[:nrpe], src_dir)
+        deprec2.install_from_src(SRC_PACKAGES[:nrpe], src_dir)
+        # XXX this should only be run on the nrpe clients
+        # XXX currently it's run on the nagios server too 
+        # XXX shouldn't do any harm but we should split them up later 
+        deprec2.append_to_file_if_missing('/etc/services', 'nrpe            5666/tcp # NRPE')    
+        config
+      end
+      
+      task :install_deps do
+        apt.install( {:base => %w(xinetd libssl-dev openssl)}, :stable )
+      end
+      
+      task :create_nagios_user do
+        deprec2.groupadd(nagios_group)
+        deprec2.useradd(nagios_user, :group => nagios_group, :homedir => false)
+        # deprec2.add_user_to_group(nagios_user, apache_user)
+        deprec2.groupadd(nagios_cmd_group)
+        deprec2.add_user_to_group(nagios_user, nagios_cmd_group)
+        deprec2.add_user_to_group(apache_user, nagios_cmd_group)        
+      end
+      
+      SYSTEM_CONFIG_FILES[:nrpe] = [
+        
+        {:template => 'nrpe.xinetd.erb',
+         :path => "/etc/xinetd.d/nrpe",
+         :mode => 0644,
+         :owner => 'root:root'},
+         
+        {:template => 'nrpe.cfg.erb',
+         :path => "/usr/local/nagios/etc/nrpe.cfg",
+         :mode => 0644,
+         :owner => 'nagios:nagios'}, # XXX hard coded file owner is bad...
+                                    # It's done here because we aren't using 
+                                    # lazy eval in hash constant.
+        {:template => "check_mongrel_cluster.rb",
+         :path => '/usr/local/nagios/libexec/check_mongrel_cluster.rb',
+         :mode => 0755,
+         :owner => 'root:root'},
+         
+         {:template => "check_linux_free_memory.pl",
+          :path => '/usr/local/nagios/libexec/check_linux_free_memory.pl',
+          :mode => 0755,
+          :owner => 'root:root'}
+      
+      ]
+      
+      desc "Generate configuration file(s) for nrpe from template(s)"
+      task :config_gen do
+        SYSTEM_CONFIG_FILES[:nrpe].each do |file|
+          deprec2.render_template(:nagios, file)
+        end
+      end
+      
+      desc "Push nrpe config files to server"
+      task :config do
+        deprec2.push_configs(:nagios, SYSTEM_CONFIG_FILES[:nrpe])
+        # XXX should really only do this on targets
+        sudo "/etc/init.d/xinetd stop"  
+        sudo "/etc/init.d/xinetd start"  
+      end
+      
+      desc "Test whether NRPE is listening on client"
+      task :test_local do
+        run "/usr/local/nagios/libexec/check_nrpe -H localhost"
+      end
+      
+      desc "Test whether nagios server can query client via NRPE"
+      task :test_remote, :roles => :nagios do
+        target_host = Capistrano::CLI.ui.ask "target hostname"
+        run "/usr/local/nagios/libexec/check_nrpe -H #{target_host}"
+      end
+  
+    end
+      
+    # PNP4nagios
+    # http://downloads.sourceforge.net/sourceforge/pnp4nagios/pnp-0.4.14.tar.gz?use_mirror=internode
+    
+    
+  end
+end