openvox 7.37.1

data/README.md

@@ -0,0 +1,68 @@
+# Puppet
+
+![RSpec tests](https://github.com/puppetlabs/puppet/workflows/RSpec%20tests/badge.svg)
+[![Gem Version](https://badge.fury.io/rb/puppet.svg)](https://badge.fury.io/rb/puppet)
+[![Inline docs](https://inch-ci.org/github/puppetlabs/puppet.svg)](https://inch-ci.org/github/puppetlabs/puppet)
+
+Puppet, an automated administrative engine for your Linux, Unix, and Windows systems, performs
+administrative tasks (such as adding users, installing packages, and updating server
+configurations) based on a centralized specification.
+
+## Documentation
+
+Documentation for Puppet and related projects can be found online at the
+[Puppet Docs site](https://puppet.com/docs).
+
+### HTTP API
+
+[HTTP API Index](https://puppet.com/docs/puppet/latest/http_api/http_api_index.html)
+
+## Installation
+
+The best way to run Puppet is with [Puppet Enterprise (PE)](https://puppet.com/products/puppet-enterprise/),
+which also includes orchestration features, a web console, and professional support.
+The PE documentation is [available here.](https://puppet.com/docs/pe/latest)
+
+To install an open source release of Puppet,
+[see the installation guide on the docs site.](https://puppet.com/docs/puppet/latest/installing_and_upgrading.html)
+
+If you need to run Puppet from source as a tester or developer,
+see the [Quick Start to Developing on Puppet](docs/quickstart.md) guide.
+
+## Developing and Contributing
+
+We'd love to get contributions from you! For a quick guide to getting your
+system setup for developing, take a look at our [Quickstart
+Guide](https://github.com/puppetlabs/puppet/blob/main/docs/quickstart.md). Once you are up and running, take a look at the
+[Contribution Documents](https://github.com/puppetlabs/puppet/blob/main/CONTRIBUTING.md) to see how to get your changes merged
+in.
+
+For more complete docs on developing with Puppet, take a look at the
+rest of the [developer documents](https://github.com/puppetlabs/puppet/blob/main/docs/index.md).
+
+## Licensing
+
+See [LICENSE](https://github.com/puppetlabs/puppet/blob/main/LICENSE) file. Puppet is licensed by Puppet, Inc. under the Apache license. Puppet, Inc. can be contacted at: info@puppet.com
+
+## Support
+
+Please log tickets and issues at our [JIRA tracker](https://tickets.puppetlabs.com). A [mailing
+list](https://groups.google.com/forum/?fromgroups#!forum/puppet-users) is
+available for asking questions and getting help from others, or if you prefer chat, we also have a [Puppet Community slack.](https://puppetcommunity.slack.com/)
+
+We use semantic version numbers for our releases and recommend that users stay
+as up-to-date as possible by upgrading to patch releases and minor releases as
+they become available.
+
+Bug fixes and ongoing development will occur in minor releases for the current
+major version. Security fixes will be backported to a previous major version on
+a best-effort basis, until the previous major version is no longer maintained.
+
+For example: If a security vulnerability is discovered in Puppet 6.1.1, we
+would fix it in the 6 series, most likely as 6.1.2. Maintainers would then make
+a best effort to backport that fix onto the latest Puppet 5 release.
+
+Long-term support, including security patches and bug fixes, is available for
+commercial customers. Please see the following page for more details:
+
+[Puppet Enterprise Support Lifecycle](https://puppet.com/docs/puppet-enterprise/product-support-lifecycle/)

data/Rakefile

@@ -0,0 +1,160 @@
+# Rakefile for Puppet -*- ruby -*-
+RAKE_ROOT = File.dirname(__FILE__)
+
+# We need access to the Puppet.version method
+$LOAD_PATH.unshift(File.expand_path("lib"))
+require 'puppet/version'
+
+$LOAD_PATH << File.join(RAKE_ROOT, 'tasks')
+
+begin
+  require 'rubygems'
+  require 'rubygems/package_task'
+rescue LoadError
+  # Users of older versions of Rake (0.8.7 for example) will not necessarily
+  # have rubygems installed, or the newer rubygems package_task for that
+  # matter.
+  require 'rake/packagetask'
+  require 'rake/gempackagetask'
+end
+
+require 'rake'
+require 'open3'
+
+Dir['tasks/**/*.rake'].each { |t| load t }
+
+if Rake.application.top_level_tasks.grep(/^(pl:|package:)/).any?
+  begin
+    require 'packaging'
+    Pkg::Util::RakeUtils.load_packaging_tasks
+  rescue LoadError => e
+    puts "Error loading packaging rake tasks: #{e}"
+  end
+end
+
+namespace :package do
+  task :bootstrap do
+    puts 'Bootstrap is no longer needed, using packaging-as-a-gem'
+  end
+  task :implode do
+    puts 'Implode is no longer needed, using packaging-as-a-gem'
+  end
+end
+
+task :default do
+  sh %{rake -T}
+end
+
+namespace :pl_ci do
+  desc 'Build puppet gems'
+  task :gem_build, [:gemspec] do |t, args|
+    args.with_defaults(gemspec: 'puppet.gemspec')
+    stdout, stderr, status = Open3.capture3(<<~END)
+      gem build #{args.gemspec} --platform x86-mingw32 && \
+      gem build #{args.gemspec} --platform x64-mingw32 && \
+      gem build #{args.gemspec} --platform universal-darwin && \
+      gem build #{args.gemspec}
+    END
+    if !status.exitstatus.zero?
+      puts "Error building #{args.gemspec}\n#{stdout} \n#{stderr}"
+      exit(1)
+    else
+      puts stdout
+    end
+  end
+
+  desc 'build the nightly puppet gems'
+  task :nightly_gem_build do
+    # this is taken from `rake package:nightly_gem`
+    extended_dot_version = %x{git describe --tags --dirty --abbrev=7}.chomp.tr('-', '.')
+
+    # we must create tempfile in the same directory as puppetg.gemspec, since
+    # it uses __dir__ to determine which files to include
+    require 'tempfile'
+    Tempfile.create('gemspec', __dir__) do |dst|
+      File.open('puppet.gemspec', 'r') do |src|
+        src.readlines.each do |line|
+          if line.match?(/version\s*=\s*['"][0-9.]+['"]/)
+            line = "spec.version = '#{extended_dot_version}'"
+          end
+          dst.puts line
+        end
+      end
+      dst.flush
+      Rake::Task['pl_ci:gem_build'].invoke(dst.path)
+    end
+  end
+end
+
+task :spec do
+  ENV["LOG_SPEC_ORDER"] = "true"
+  sh %{rspec #{ENV['TEST'] || ENV['TESTS'] || 'spec'}}
+end
+
+desc 'run static analysis with rubocop'
+task(:rubocop) do
+  require 'rubocop'
+  cli = RuboCop::CLI.new
+  exit_code = cli.run(%w(--display-cop-names --format simple))
+  raise "RuboCop detected offenses" if exit_code != 0
+end
+
+desc "verify that changed files are clean of Ruby warnings"
+task(:warnings) do
+  # This rake task looks at all files modified in this branch.
+  commit_range = 'HEAD^..HEAD'
+  ruby_files_ok = true
+  puts "Checking modified files #{commit_range}"
+  %x{git diff --diff-filter=ACM --name-only #{commit_range}}.each_line do |modified_file|
+    modified_file.chomp!
+    # Skip racc generated file as it can have many warnings that cannot be manually fixed
+    next if modified_file.end_with?("pops/parser/eparser.rb")
+    next if modified_file.start_with?('spec/fixtures/', 'acceptance/fixtures/') || File.extname(modified_file) != '.rb'
+    puts modified_file
+
+    stdout, stderr, _ = Open3.capture3("ruby -wc \"#{modified_file}\"")
+    unless stderr.empty?
+      ruby_files_ok = false
+      puts stderr
+    end
+    puts stdout
+  end
+  raise "One or more ruby files contain warnings." unless ruby_files_ok
+end
+
+if Rake.application.top_level_tasks.grep(/^gettext:/).any?
+  begin
+    spec = Gem::Specification.find_by_name 'gettext-setup'
+    load "#{spec.gem_dir}/lib/tasks/gettext.rake"
+    GettextSetup.initialize(File.absolute_path('locales', File.dirname(__FILE__)))
+  rescue LoadError
+    abort("Run `bundle install --with documentation` to install the `gettext-setup` gem.")
+  end
+end
+
+begin
+  require "github_changelog_generator/task"
+  require_relative "lib/puppet/version"
+
+  GitHubChangelogGenerator::RakeTask.new :changelog do |config|
+    config.header = <<~HEADER.chomp
+    # Changelog
+
+    All notable changes to this project will be documented in this file.
+    HEADER
+    config.user = "openvoxproject"
+    config.project = "puppet"
+    config.exclude_labels = %w[dependencies duplicate question invalid wontfix wont-fix modulesync skip-changelog]
+    config.since_tag = "7.36.1"
+    config.future_release = Puppet::PUPPETVERSION
+    # FIXME: The following should be enough to ignore versions in the main
+    # branch only, but this does not work.  For now we rely on a regexp to
+    # exclude tags that should not be matched.
+    config.release_branch = "7.x"
+    config.exclude_tags_regex = /\A8\./
+  end
+rescue LoadError
+  task :changelog do
+    abort("Run `bundle install --with packaging` to install the `github_changelog_generator` gem.")
+  end
+end

data/bin/puppet

@@ -0,0 +1,9 @@
+#!/usr/bin/env ruby
+
+begin
+  require 'puppet/util/command_line'
+  Puppet::Util::CommandLine.new.execute
+rescue LoadError => e
+  $stderr.puts e.message
+  exit(1)
+end

data/conf/environment.conf

@@ -0,0 +1,18 @@
+# Each environment can have an environment.conf file. Its settings will only
+# affect its own environment. See docs for more info:
+# https://puppet.com/docs/puppet/latest/config_file_environment.html
+
+# Any unspecified settings use default values; some of those defaults are based
+# on puppet.conf settings.
+
+# If these settings include relative file paths, they'll be resolved relative to
+# this environment's directory.
+
+# Allowed settings and default values:
+
+# modulepath = ./modules:$basemodulepath
+# manifest = (default_manifest from puppet.conf, which defaults to ./manifests)
+# config_version = (no script; Puppet will use the time the catalog was compiled)
+# environment_timeout = (environment_timeout from puppet.conf, which defaults to 0)
+    # Note: unless you have a specific reason, we recommend only setting
+    # environment_timeout in puppet.conf.

data/conf/fileserver.conf

@@ -0,0 +1,32 @@
+# fileserver.conf
+
+# Puppet automatically serves PLUGINS and FILES FROM MODULES: anything in
+# <module name>/files/<file name> is available to authenticated nodes at
+# puppet:///modules/<module name>/<file name>. You do not need to edit this
+# file to enable this.
+
+# MOUNT POINTS
+
+# If you need to serve files from a directory that is NOT in a module,
+# you must create a static mount point in this file:
+#
+# [extra_files]
+#   path /etc/puppetlabs/puppet/files
+#
+# In the example above, anything in /etc/puppetlabs/puppet/files/<file name>
+# would be available to authenticated nodes at puppet:///extra_files/<file name>.
+#
+# Mount points may also use three placeholders as part of their path:
+#
+# %H - The node's certname.
+# %h - The portion of the node's certname before the first dot. (Usually the
+#      node's short hostname.)
+# %d - The portion of the node's certname after the first dot. (Usually the
+#      node's domain name.)
+
+# PERMISSIONS
+
+# The ability to set permissions - for example, using the allow, allow_ip, or
+# deny directives - has been removed from fileserver.conf. Instead, you can
+# control file access in Puppet Server's auth.conf file. See the documentation
+# at https://puppet.com/docs/puppetserver/latest/config_file_auth.html.

data/conf/hiera.yaml

@@ -0,0 +1,11 @@
+---
+# Hiera 5 Global configuration file
+
+version: 5
+
+# defaults:
+#   data_hash: yaml_data
+# hierarchy:
+#  - name: Common
+#    data_hash: yaml_data
+hierarchy: []

data/conf/puppet.conf

@@ -0,0 +1,6 @@
+# This file can be used to override the default puppet settings.
+# See the following links for more details on what settings are available:
+# - https://puppet.com/docs/puppet/latest/config_important_settings.html
+# - https://puppet.com/docs/puppet/latest/config_about_settings.html
+# - https://puppet.com/docs/puppet/latest/config_file_main.html
+# - https://puppet.com/docs/puppet/latest/configuration.html

data/examples/enc/regexp_nodes/classes/databases

@@ -0,0 +1,2 @@
+db\d{2}
+mysql

data/examples/enc/regexp_nodes/classes/webservers

@@ -0,0 +1,2 @@
+^(web|www)
+leterel

data/examples/enc/regexp_nodes/environment/development

@@ -0,0 +1,2 @@
+^dev-
+prod-canary

data/examples/enc/regexp_nodes/parameters/service/prod

@@ -0,0 +1 @@
+\d{3}$

data/examples/enc/regexp_nodes/parameters/service/qa

@@ -0,0 +1,3 @@
+^qa-
+^qa2-
+^qa3-

data/examples/enc/regexp_nodes/parameters/service/sandbox

@@ -0,0 +1 @@
+^dev-

data/examples/enc/regexp_nodes/regexp_nodes.rb

@@ -0,0 +1,270 @@
+#!/usr/bin/env ruby
+
+# = Synopsis
+# This is an external node classifier script, after
+# https://puppet.com/docs/puppet/latest/lang_write_functions_in_puppet.html
+#
+# = Usage
+# regexp_nodes.rb <host>
+#
+# = Description
+# This classifier implements filesystem autoloading: It looks through classes,
+# parameters, and environment subdirectories, looping through each file it
+# finds.  Each file's contents are a regexp-per-line which, if they match the
+# hostname passed to the program as ARGV[0], sets a class, parameter value
+# or environment named the same thing as the file itself. At the end, the
+# resultant data structure is returned back to the puppet master process as
+# yaml.
+#
+# = Caveats
+# Since the files are read in directory order, multiple matches for a given
+# hostname in the parameters/ and environment/ subdirectories will return the
+# last-read value.  (Multiple classes/ matches don't cause a problem; the
+# class is either incuded or it isn't)
+#
+# Unmatched hostnames in any of the environment/ files will cause 'production'
+# to be emitted; be aware of the complexity surrounding the interaction between
+# ENC and environments as discussed in https://projects.puppetlabs.com/issues/3910
+#
+# = Examples
+# Based on the example files in the classes/ and parameters/ subdirectories
+# in the distribution, classes/database will set the 'database' class for
+# hosts matching %r{db\d{2}} (that is, 'db' followed by two digits) or with
+# 'mysql' anywhere in the hostname.  Similarly, hosts beginning with 'www' or
+# 'web' or the hostname 'leterel' (my workstation) will be assigned the
+# 'webserver' class.
+#
+# Under parameters/ there is one subdirectory 'service' which
+# sets the a parameter called 'service' to the value 'prod' for production
+# hosts (whose hostnames always end with a three-digit code), 'qa' for
+# anything that starts with 'qa-' 'qa2-' or 'qa3-', and 'sandbox' for any
+# development machines whose hostnames start with 'dev-'.
+#
+# In the environment/ subdirectory, any hosts matching '^dev-' and a single
+# production host which serves as 'canary in the coal mine' will be put into
+# the development environment
+#
+# = Author
+# Eric Sorenson <eric@explosive.net>
+
+# we need yaml or there's not much point in going on
+require 'yaml'
+
+# Sets are like arrays but automatically de-duplicate elements
+require 'set'
+
+# set up some syslog logging
+require 'syslog'
+Syslog.open('extnodes', Syslog::LOG_PID | Syslog::LOG_NDELAY, Syslog::LOG_DAEMON)
+# change this to LOG_UPTO(Sysslog::LOG_DEBUG) if you want to see everything
+# but remember your syslog.conf needs to match this or messages will be filtered
+Syslog.mask = Syslog::LOG_UPTO(Syslog::LOG_INFO)
+
+# Helper method to log to syslog; we log at level debug if no level is specified
+# since those are the most frequent calls to this method
+def log(message,level=:debug)
+  Syslog.send(level,message)
+end
+
+
+# set our workingdir to be the directory we're executed from, regardless
+# of parent's cwd, symlinks, etc. via handy Pathname.realpath method
+require 'pathname'
+p = Pathname.new(File.dirname(__FILE__))
+WORKINGDIR = "#{p.realpath}"
+
+# This class holds all the methods for creating and accessing the properties
+# of an external node. There are really only two public methods: initialize
+# and a special version of to_yaml
+
+class ExternalNode
+  # Make these instance variables get/set-able with eponymous methods
+  attr_accessor :classes, :parameters, :environment, :hostname
+
+  # initialize takes three arguments:
+  # hostname:: usually passed in via ARGV[0] but it could be anything
+  # classdir:: directory under WORKINGDIR to look for files named after
+  # classes
+  # parameterdir:: directory under WORKINGDIR to look for directories to set
+  # parameters
+  def initialize(hostname, classdir = 'classes/', parameterdir = 'parameters/', environmentdir = 'environment/')
+    # instance variables that contain the lists of classes and parameters
+    @classes = Set.new
+    @parameters = Hash.new("unknown")  # sets a default value of "unknown"
+    @environment = "production"
+
+    self.parse_argv(hostname)
+    self.match_classes("#{WORKINGDIR}/#{classdir}")
+    self.match_parameters("#{WORKINGDIR}/#{parameterdir}")
+    self.match_environment("#{WORKINGDIR}/#{environmentdir}")
+  end
+
+  # private method called by initialize which sanity-checks our hostname.
+  # good candidate for overriding in a subclass if you need different checks
+  def parse_argv(hostname)
+    if hostname =~ /^([-\w]+?)\.([-\w\.]+)/  # non-greedy up to the first . is hostname
+      @hostname = $1
+    elsif hostname =~ /^([-\w]+)$/     # sometimes puppet's @name is just a name
+      @hostname = hostname
+      log("got shortname for [#{hostname}]")
+    else
+      log("didn't receive parsable hostname, got: [#{hostname}]",:err)
+      exit(1)
+    end
+  end
+
+  # to_yaml massages a copy of the object and outputs clean yaml so we don't
+  # feed weird things back to puppet []<
+  def to_yaml
+    classes = self.classes.to_a
+    if self.parameters.empty? # otherwise to_yaml prints "parameters: {}"
+      parameters = nil
+    else
+      parameters = self.parameters
+    end
+    ({ 'classes' => classes, 'parameters' => parameters, 'environment' => environment}).to_yaml
+  end
+
+  # Private method that expects an absolute path to a file and a string to
+  # match - it returns true if the string was matched by any of the lines in
+  # the file
+  def matched_in_patternfile?(filepath, matchthis)
+
+    patternlist = []
+
+    begin
+      File.open(filepath).each do |l|
+        l.chomp!
+
+        next if l =~ /^$/
+        next if l =~ /^#/
+
+        if l =~ /^\s*(\S+)/
+          m = Regexp.last_match
+          log("found a non-comment line, transforming [#{l}] into [#{m[1]}]")
+          l.gsub!(l,m[1])
+        else
+          next l
+        end
+
+        pattern = %r{#{l}}
+        patternlist <<  pattern
+        log("appending [#{pattern}] to patternlist for [#{filepath}]")
+      end
+    rescue StandardError
+      log("Problem reading #{filepath}: #{$!}",:err)
+      exit(1)
+    end
+
+    log("list of patterns for #{filepath}: #{patternlist}")
+
+    if matchthis =~ Regexp.union(patternlist)
+      log("matched #{$~} in #{matchthis}, returning true")
+      return true
+
+    else  # hostname didn't match anything in patternlist
+      log("#{matchthis} unmatched, returning false")
+      return nil
+    end
+
+  end # def
+
+  # private method - takes a path to look for files, iterates through all
+  # readable, regular files it finds, and matches this instance's @hostname
+  # against each line; if any match, the class will be set for this node.
+  def match_classes(fullpath)
+    Dir.foreach(fullpath) do |patternfile|
+      filepath = "#{fullpath}/#{patternfile}"
+      next unless File.file?(filepath) and
+        File.readable?(filepath)
+        next if patternfile =~ /^\./
+      log("Attempting to match [#{@hostname}] in [#{filepath}]")
+      if matched_in_patternfile?(filepath,@hostname)
+        @classes << patternfile.to_s
+        log("Appended #{patternfile} to classes instance variable")
+      end
+    end
+  end
+
+  # match_environment is similar to match_classes but it overwrites
+  # any previously set value (usually just the default, 'production')
+  # with a match
+  def match_environment(fullpath)
+    Dir.foreach(fullpath) do |patternfile|
+      filepath = "#{fullpath}/#{patternfile}"
+      next unless File.file?(filepath) and
+        File.readable?(filepath)
+        next if patternfile =~ /^\./
+      log("Attempting to match [#{@hostname}] in [#{filepath}]")
+      if matched_in_patternfile?(filepath,@hostname)
+        @environment = patternfile.to_s
+        log("Wrote #{patternfile} to environment instance variable")
+      end
+    end
+  end
+
+
+  # Parameters are handled slightly differently; we make another level of
+  # directories to get the parameter name, then use the names of the files
+  # contained in there for the values of those parameters.
+  #
+  # ex: cat ./parameters/service/production
+  # ^prodweb
+  # would set parameters["service"] = "production" for prodweb001
+  def match_parameters(fullpath)
+    Dir.foreach(fullpath) do |parametername|
+
+      filepath = "#{fullpath}/#{parametername}"
+      next if File.basename(filepath) =~ /^\./   # skip over dotfiles
+
+      next unless File.directory?(filepath) and
+        File.readable?(filepath)        # skip over non-directories
+
+      log("Considering contents of #{filepath}")
+
+      Dir.foreach("#{filepath}") do |patternfile|
+        secondlevel = "#{filepath}/#{patternfile}"
+        log("Found parameters patternfile at #{secondlevel}")
+        next unless File.file?(secondlevel) and
+          File.readable?(secondlevel)
+        log("Attempting to match [#{@hostname}] in [#{secondlevel}]")
+        if matched_in_patternfile?(secondlevel, @hostname)
+          @parameters[ parametername.to_s ] = patternfile.to_s
+          log("Set @parameters[#{parametername}] = #{patternfile}")
+        end
+      end
+    end
+  end
+
+end
+
+# Logic for local hacks that don't fit neatly into the autoloading model can
+# happen as we initialize a subclass
+class MyExternalNode < ExternalNode
+
+  def initialize(hostname, classdir = 'classes/', parameterdir = 'parameters/')
+
+    super
+
+    # Set "hostclass" parameter based on hostname,
+    # stripped of leading environment prefix and numeric suffix
+    if @hostname =~ /^(\w*?)-?(\D+)(\d{2,3})$/
+      match = Regexp.last_match
+
+      hostclass = match[2]
+      log("matched hostclass #{hostclass}")
+      @parameters[ "hostclass" ] = hostclass
+    else
+      log("couldn't figure out class from #{@hostname}",:warning)
+
+    end
+  end
+
+end
+
+
+# Here we begin actual execution by calling methods defined above
+
+mynode = MyExternalNode.new(ARGV[0])
+
+puts mynode.to_yaml