puppet-parse 0.0.1 → 0.0.2

data/lib/vendor/puppet/type/filebucket.rb

@@ -0,0 +1,114 @@
+module Puppet
+  require 'puppet/file_bucket/dipper'
+
+  newtype(:filebucket) do
+    @doc = "A repository for backing up files.  If no filebucket is
+      defined, then files will be backed up in their current directory,
+      but the filebucket can be either a host- or site-global repository
+      for backing up.  It stores files and returns the MD5 sum, which
+      can later be used to retrieve the file if restoration becomes
+      necessary.  A filebucket does not do any work itself; instead,
+      it can be specified as the value of *backup* in a **file** object.
+
+      Currently, filebuckets are only useful for manual retrieval of
+      accidentally removed files (e.g., you look in the log for the md5 sum
+      and retrieve the file with that sum from the filebucket), but when
+      transactions are fully supported filebuckets will be used to undo
+      transactions.
+
+      You will normally want to define a single filebucket for your
+      whole network and then use that as the default backup location:
+
+          # Define the bucket
+          filebucket { 'main':
+            server => puppet,
+            path   => false,
+            # Due to a known issue, path must be set to false for remote filebuckets.
+          }
+
+          # Specify it as the default target
+          File { backup => main }
+
+      Puppetmaster servers create a filebucket by default, so this will
+      work in a default configuration."
+
+    newparam(:name) do
+      desc "The name of the filebucket."
+      isnamevar
+    end
+
+    newparam(:server) do
+      desc "The server providing the remote filebucket.  If this is not
+        specified then *path* is checked. If it is set, then the
+        bucket is local.  Otherwise the puppetmaster server specified
+        in the config or at the commandline is used.
+
+        Due to a known issue, you currently must set the `path` attribute to
+        false if you wish to specify a `server` attribute."
+      defaultto { Puppet[:server] }
+    end
+
+    newparam(:port) do
+      desc "The port on which the remote server is listening.
+        Defaults to the normal Puppet port, %s." % Puppet[:masterport]
+
+      defaultto { Puppet[:masterport] }
+    end
+
+    newparam(:path) do
+      desc "The path to the local filebucket.  If this is
+        unset, then the bucket is remote.  The parameter *server* must
+        can be specified to set the remote server."
+
+      defaultto { Puppet[:clientbucketdir] }
+
+      validate do |value|
+        if value.is_a? Array
+          raise ArgumentError, "You can only have one filebucket path"
+        end
+
+        if value.is_a? String and not Puppet::Util.absolute_path?(value)
+          raise ArgumentError, "Filebucket paths must be absolute"
+        end
+
+        true
+      end
+    end
+
+    # Create a default filebucket.
+    def self.mkdefaultbucket
+      new(:name => "puppet", :path => Puppet[:clientbucketdir])
+    end
+
+    def bucket
+      mkbucket unless defined?(@bucket)
+      @bucket
+    end
+
+    private
+
+    def mkbucket
+      # Default is a local filebucket, if no server is given.
+      # If the default path has been removed, too, then
+      # the puppetmaster is used as default server
+
+      type = "local"
+      args = {}
+      if self[:path]
+        args[:Path] = self[:path]
+      else
+        args[:Server] = self[:server]
+        args[:Port] = self[:port]
+      end
+
+      begin
+        @bucket = Puppet::FileBucket::Dipper.new(args)
+      rescue => detail
+        puts detail.backtrace if Puppet[:trace]
+        self.fail("Could not create #{type} filebucket: #{detail}")
+      end
+
+      @bucket.name = self.name
+    end
+  end
+end

data/lib/vendor/puppet/type/group.rb

@@ -0,0 +1,149 @@
+require 'etc'
+require 'facter'
+require 'puppet/property/keyvalue'
+
+module Puppet
+  newtype(:group) do
+    @doc = "Manage groups. On most platforms this can only create groups.
+      Group membership must be managed on individual users.
+
+      On some platforms such as OS X, group membership is managed as an
+      attribute of the group, not the user record. Providers must have
+      the feature 'manages_members' to manage the 'members' property of
+      a group record."
+
+    feature :manages_members,
+      "For directories where membership is an attribute of groups not users."
+
+    feature :manages_aix_lam,
+      "The provider can manage AIX Loadable Authentication Module (LAM) system."
+
+    feature :system_groups,
+      "The provider allows you to create system groups with lower GIDs."
+
+    ensurable do
+      desc "Create or remove the group."
+
+      newvalue(:present) do
+        provider.create
+      end
+
+      newvalue(:absent) do
+        provider.delete
+      end
+    end
+
+    newproperty(:gid) do
+      desc "The group ID.  Must be specified numerically.  If no group ID is
+        specified when creating a new group, then one will be chosen
+        automatically according to local system standards. This will likely
+        result in the same group having different GIDs on different systems,
+        which is not recommended.
+
+        On Windows, this property is read-only and will return the group's security
+        identifier (SID)."
+
+      def retrieve
+        provider.gid
+      end
+
+      def sync
+        if self.should == :absent
+          raise Puppet::DevError, "GID cannot be deleted"
+        else
+          provider.gid = self.should
+        end
+      end
+
+      munge do |gid|
+        case gid
+        when String
+          if gid =~ /^[-0-9]+$/
+            gid = Integer(gid)
+          else
+            self.fail "Invalid GID #{gid}"
+          end
+        when Symbol
+          unless gid == :absent
+            self.devfail "Invalid GID #{gid}"
+          end
+        end
+
+        return gid
+      end
+    end
+
+    newproperty(:members, :array_matching => :all, :required_features => :manages_members) do
+      desc "The members of the group. For directory services where group
+      membership is stored in the group objects, not the users."
+
+      def change_to_s(currentvalue, newvalue)
+        currentvalue = currentvalue.join(",") if currentvalue != :absent
+        newvalue = newvalue.join(",")
+        super(currentvalue, newvalue)
+      end
+    end
+
+    newparam(:auth_membership) do
+      desc "whether the provider is authoritative for group membership."
+      defaultto true
+    end
+
+    newparam(:name) do
+      desc "The group name. While naming limitations vary by operating system,
+        it is advisable to restrict names to the lowest common denominator,
+        which is a maximum of 8 characters beginning with a letter.
+
+        Note that Puppet considers group names to be case-sensitive, regardless
+        of the platform's own rules; be sure to always use the same case when
+        referring to a given group."
+      isnamevar
+    end
+
+    newparam(:allowdupe, :boolean => true) do
+      desc "Whether to allow duplicate GIDs. Defaults to `false`."
+
+      newvalues(:true, :false)
+
+      defaultto false
+    end
+
+    newparam(:ia_load_module, :required_features => :manages_aix_lam) do
+      desc "The name of the I&A module to use to manage this user"
+    end
+
+    newproperty(:attributes, :parent => Puppet::Property::KeyValue, :required_features => :manages_aix_lam) do
+      desc "Specify group AIX attributes in an array of `key=value` pairs."
+
+      def membership
+        :attribute_membership
+      end
+
+      def delimiter
+        " "
+      end
+
+      validate do |value|
+        raise ArgumentError, "Attributes value pairs must be separated by an =" unless value.include?("=")
+      end
+    end
+
+    newparam(:attribute_membership) do
+      desc "Whether specified attribute value pairs should be treated as the only attributes
+        of the user or whether they should merely
+        be treated as the minimum list."
+
+      newvalues(:inclusive, :minimum)
+
+      defaultto :minimum
+    end
+
+    newparam(:system, :boolean => true) do
+      desc "Whether the group is a system group with lower GID."
+
+      newvalues(:true, :false)
+
+      defaultto false
+    end
+  end
+end

data/lib/vendor/puppet/type/host.rb

@@ -0,0 +1,87 @@
+require 'puppet/property/ordered_list'
+
+module Puppet
+  newtype(:host) do
+    ensurable
+
+    newproperty(:ip) do
+      desc "The host's IP address, IPv4 or IPv6."
+
+
+      def valid_v4?(addr)
+        if /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/ =~ addr
+          return $~.captures.all? {|i| i = i.to_i; i >= 0 and i <= 255 }
+        end
+        return false
+      end
+
+      def valid_v6?(addr)
+        # http://forums.dartware.com/viewtopic.php?t=452
+        # ...and, yes, it is this hard.  Doing it programatically is harder.
+        return true if addr =~ /^\s*((([0-9A-Fa-f]{1,4}:){7}([0-9A-Fa-f]{1,4}|:))|(([0-9A-Fa-f]{1,4}:){6}(:[0-9A-Fa-f]{1,4}|((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9A-Fa-f]{1,4}:){5}(((:[0-9A-Fa-f]{1,4}){1,2})|:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9A-Fa-f]{1,4}:){4}(((:[0-9A-Fa-f]{1,4}){1,3})|((:[0-9A-Fa-f]{1,4})?:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){3}(((:[0-9A-Fa-f]{1,4}){1,4})|((:[0-9A-Fa-f]{1,4}){0,2}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){2}(((:[0-9A-Fa-f]{1,4}){1,5})|((:[0-9A-Fa-f]{1,4}){0,3}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){1}(((:[0-9A-Fa-f]{1,4}){1,6})|((:[0-9A-Fa-f]{1,4}){0,4}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(:(((:[0-9A-Fa-f]{1,4}){1,7})|((:[0-9A-Fa-f]{1,4}){0,5}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:)))(%.+)?\s*$/
+
+        return false
+      end
+
+      validate do |value|
+        return true if valid_v4?(value) or valid_v6?(value)
+        raise Puppet::Error, "Invalid IP address #{value.inspect}"
+      end
+    end
+
+    # for now we use OrderedList to indicate that the order does matter.
+    newproperty(:host_aliases, :parent => Puppet::Property::OrderedList) do
+      desc "Any aliases the host might have.  Multiple values must be
+        specified as an array."
+
+      def delimiter
+        " "
+      end
+
+      def inclusive?
+        true
+      end
+
+      validate do |value|
+        raise Puppet::Error, "Host aliases cannot include whitespace" if value =~ /\s/
+        raise Puppet::Error, "Host alias cannot be an empty string. Use an empty array to delete all host_aliases " if value =~ /^\s*$/
+      end
+
+    end
+
+    newproperty(:comment) do
+      desc "A comment that will be attached to the line with a # character."
+    end
+
+    newproperty(:target) do
+      desc "The file in which to store service information.  Only used by
+        those providers that write to disk. On most systems this defaults to `/etc/hosts`."
+
+      defaultto { if @resource.class.defaultprovider.ancestors.include?(Puppet::Provider::ParsedFile)
+        @resource.class.defaultprovider.default_target
+        else
+          nil
+        end
+      }
+    end
+
+    newparam(:name) do
+      desc "The host name."
+
+      isnamevar
+
+      validate do |value|
+        # LAK:NOTE See http://snurl.com/21zf8  [groups_google_com]
+        x = value.split('.').each do |hostpart|
+          unless hostpart =~ /^([\d\w]+|[\d\w][\d\w\-]+[\d\w])$/
+            raise Puppet::Error, "Invalid host name"
+          end
+        end
+      end
+    end
+
+    @doc = "Installs and manages host entries.  For most systems, these
+      entries will just be in `/etc/hosts`, but some systems (notably OS X)
+      will have different solutions."
+  end
+end

data/lib/vendor/puppet/type/interface.rb

@@ -0,0 +1,112 @@
+#
+# Manages an interface on a given router or switch
+#
+
+require 'puppet/util/network_device/ipcalc'
+
+Puppet::Type.newtype(:interface) do
+
+    @doc = "This represents a router or switch interface. It is possible to manage
+    interface mode (access or trunking, native vlan and encapsulation) and
+    switchport characteristics (speed, duplex)."
+
+    apply_to_device
+
+    ensurable do
+      defaultvalues
+
+      aliasvalue :shutdown, :absent
+      aliasvalue :no_shutdown, :present
+
+      defaultto { :no_shutdown }
+    end
+
+    newparam(:name) do
+      desc "The interface's name."
+    end
+
+    newparam(:device_url) do
+      desc "The URL at which the router or switch can be reached."
+    end
+
+    newproperty(:description) do
+      desc "Interface description."
+
+      defaultto { @resource[:name] }
+    end
+
+    newproperty(:speed) do
+      desc "Interface speed."
+      newvalues(:auto, /^\d+/)
+    end
+
+    newproperty(:duplex) do
+      desc "Interface duplex."
+      newvalues(:auto, :full, :half)
+    end
+
+    newproperty(:native_vlan) do
+      desc "Interface native vlan (for access mode only)."
+      newvalues(/^\d+/)
+    end
+
+    newproperty(:encapsulation) do
+      desc "Interface switchport encapsulation."
+      newvalues(:none, :dot1q, :isl )
+    end
+
+    newproperty(:mode) do
+      desc "Interface switchport mode."
+      newvalues(:access, :trunk)
+    end
+
+    newproperty(:allowed_trunk_vlans) do
+      desc "Allowed list of Vlans that this trunk can forward."
+      newvalues(:all, /./)
+    end
+
+    newproperty(:etherchannel) do
+      desc "Channel group this interface is part of."
+      newvalues(/^\d+/)
+    end
+
+    newproperty(:ipaddress, :array_matching => :all) do
+      include Puppet::Util::NetworkDevice::IPCalc
+
+      desc "IP Address of this interface. Note that it might not be possible to set
+      an interface IP address; it depends on the interface type and device type.
+
+      Valid format of ip addresses are:
+
+      * IPV4, like 127.0.0.1
+      * IPV4/prefixlength like 127.0.1.1/24
+      * IPV6/prefixlength like FE80::21A:2FFF:FE30:ECF0/128
+      * an optional suffix for IPV6 addresses from this list: `eui-64`, `link-local`
+
+      It is also possible to supply an array of values.
+      "
+
+      validate do |values|
+        values = [values] unless values.is_a?(Array)
+        values.each do |value|
+          self.fail "Invalid interface ip address" unless parse(value.gsub(/\s*(eui-64|link-local)\s*$/,''))
+        end
+      end
+
+      munge do |value|
+        option = value =~ /eui-64|link-local/i ? value.gsub(/^.*?\s*(eui-64|link-local)\s*$/,'\1') : nil
+        [parse(value.gsub(/\s*(eui-64|link-local)\s*$/,'')), option].flatten
+      end
+
+      def value_to_s(value)
+        value = [value] unless value.is_a?(Array)
+        value.map{ |v| "#{v[1].to_s}/#{v[0]} #{v[2]}"}.join(",")
+      end
+
+      def change_to_s(currentvalue, newvalue)
+        currentvalue = value_to_s(currentvalue) if currentvalue != :absent
+        newvalue = value_to_s(newvalue)
+        super(currentvalue, newvalue)
+      end
+    end
+end

data/lib/vendor/puppet/type/k5login.rb

@@ -0,0 +1,88 @@
+# Plug-in type for handling k5login files
+require 'puppet/util'
+
+Puppet::Type.newtype(:k5login) do
+  @doc = "Manage the `.k5login` file for a user.  Specify the full path to
+    the `.k5login` file as the name, and an array of principals as the
+    `principals` attribute."
+
+  ensurable
+
+  # Principals that should exist in the file
+  newproperty(:principals, :array_matching => :all) do
+    desc "The principals present in the `.k5login` file. This should be specified as an array."
+  end
+
+  # The path/name of the k5login file
+  newparam(:path) do
+    isnamevar
+    desc "The path to the `.k5login` file to manage.  Must be fully qualified."
+
+    validate do |value|
+      unless absolute_path?(value)
+        raise Puppet::Error, "File paths must be fully qualified."
+      end
+    end
+  end
+
+  # To manage the mode of the file
+  newproperty(:mode) do
+    desc "The desired permissions mode of the `.k5login` file. Defaults to `644`."
+    defaultto { "644" }
+  end
+
+  provide(:k5login) do
+    desc "The k5login provider is the only provider for the k5login
+      type."
+
+    # Does this file exist?
+    def exists?
+      File.exists?(@resource[:name])
+    end
+
+    # create the file
+    def create
+      write(@resource.should(:principals))
+      should_mode = @resource.should(:mode)
+      unless self.mode == should_mode
+        self.mode = should_mode
+      end
+    end
+
+    # remove the file
+    def destroy
+      File.unlink(@resource[:name])
+    end
+
+    # Return the principals
+    def principals(dummy_argument=:work_arround_for_ruby_GC_bug)
+      if File.exists?(@resource[:name])
+        File.readlines(@resource[:name]).collect { |line| line.chomp }
+      else
+        :absent
+      end
+    end
+
+    # Write the principals out to the k5login file
+    def principals=(value)
+      write(value)
+    end
+
+    # Return the mode as an octal string, not as an integer
+    def mode
+      "%o" % (File.stat(@resource[:name]).mode & 007777)
+    end
+
+    # Set the file mode, converting from a string to an integer.
+    def mode=(value)
+      File.chmod(Integer("0#{value}"), @resource[:name])
+    end
+
+    private
+    def write(value)
+      Puppet::Util.replace_file(@resource[:name], 0644) do |f|
+        f.puts value
+      end
+    end
+  end
+end