puppet-retrospec 0.7.0 → 0.7.2

data/vendor/gems/puppet-3.7.3/lib/puppet/application/facts.rb

@@ -0,0 +1,4 @@
+require 'puppet/application/indirection_base'
+
+class Puppet::Application::Facts < Puppet::Application::IndirectionBase
+end

data/vendor/gems/puppet-3.7.3/lib/puppet/application/file.rb

@@ -0,0 +1,4 @@
+require 'puppet/application/indirection_base'
+
+class Puppet::Application::File < Puppet::Application::IndirectionBase
+end

data/vendor/gems/puppet-3.7.3/lib/puppet/application/filebucket.rb

@@ -0,0 +1,184 @@
+require 'puppet/application'
+
+class Puppet::Application::Filebucket < Puppet::Application
+
+  option("--bucket BUCKET","-b")
+  option("--debug","-d")
+  option("--local","-l")
+  option("--remote","-r")
+  option("--verbose","-v")
+
+  attr :args
+
+  def help
+    <<-'HELP'
+
+puppet-filebucket(8) -- Store and retrieve files in a filebucket
+========
+
+SYNOPSIS
+--------
+A stand-alone Puppet filebucket client.
+
+
+USAGE
+-----
+puppet filebucket <mode> [-h|--help] [-V|--version] [-d|--debug]
+  [-v|--verbose] [-l|--local] [-r|--remote] [-s|--server <server>]
+  [-b|--bucket <directory>] <file> <file> ...
+
+Puppet filebucket can operate in three modes, with only one mode per call:
+
+backup:
+  Send one or more files to the specified file bucket. Each sent file is
+  printed with its resulting md5 sum.
+
+get:
+  Return the text associated with an md5 sum. The text is printed to
+  stdout, and only one file can be retrieved at a time.
+
+restore:
+  Given a file path and an md5 sum, store the content associated with
+  the sum into the specified file path. You can specify an entirely new
+  path to this argument; you are not restricted to restoring the content
+  to its original location.
+
+
+DESCRIPTION
+-----------
+This is a stand-alone filebucket client for sending files to a local or
+central filebucket.
+
+Note that 'filebucket' defaults to using a network-based filebucket
+available on the server named 'puppet'. To use this, you'll have to be
+running as a user with valid Puppet certificates. Alternatively, you can
+use your local file bucket by specifying '--local'.
+
+
+OPTIONS
+-------
+Note that any setting that's valid in the configuration
+file is also a valid long argument. For example, 'ssldir' is a valid
+setting, so you can specify '--ssldir <directory>' as an
+argument.
+
+See the configuration file documentation at
+http://docs.puppetlabs.com/references/stable/configuration.html for the
+full list of acceptable parameters. A commented list of all
+configuration options can also be generated by running puppet with
+'--genconfig'.
+
+* --debug:
+  Enable full debugging.
+
+* --help:
+  Print this help message
+
+* --local:
+  Use the local filebucket. This will use the default configuration
+  information.
+
+* --remote:
+  Use a remote filebucket. This will use the default configuration
+  information.
+
+* --server:
+  The server to send the file to, instead of locally.
+
+* --verbose:
+  Print extra information.
+
+* --version:
+  Print version information.
+
+
+EXAMPLE
+-------
+    $ puppet filebucket backup /etc/passwd
+    /etc/passwd: 429b225650b912a2ee067b0a4cf1e949
+    $ puppet filebucket restore /tmp/passwd 429b225650b912a2ee067b0a4cf1e949
+
+
+AUTHOR
+------
+Luke Kanies
+
+
+COPYRIGHT
+---------
+Copyright (c) 2011 Puppet Labs, LLC Licensed under the Apache 2.0 License
+
+    HELP
+  end
+
+
+  def run_command
+    @args = command_line.args
+    command = args.shift
+    return send(command) if %w{get backup restore}.include? command
+    help
+  end
+
+  def get
+    md5 = args.shift
+    out = @client.getfile(md5)
+    print out
+  end
+
+  def backup
+    raise "You must specify a file to back up" unless args.length > 0
+
+    args.each do |file|
+      unless Puppet::FileSystem.exist?(file)
+        $stderr.puts "#{file}: no such file"
+        next
+      end
+      unless FileTest.readable?(file)
+        $stderr.puts "#{file}: cannot read file"
+        next
+      end
+      md5 = @client.backup(file)
+      puts "#{file}: #{md5}"
+    end
+  end
+
+  def restore
+    file = args.shift
+    md5 = args.shift
+    @client.restore(file, md5)
+  end
+
+  def setup
+    Puppet::Log.newdestination(:console)
+
+    @client = nil
+    @server = nil
+
+    Signal.trap(:INT) do
+      $stderr.puts "Cancelling"
+      exit(1)
+    end
+
+    if options[:debug]
+      Puppet::Log.level = :debug
+    elsif options[:verbose]
+      Puppet::Log.level = :info
+    end
+
+      exit(Puppet.settings.print_configs ? 0 : 1) if Puppet.settings.print_configs?
+
+    require 'puppet/file_bucket/dipper'
+    begin
+      if options[:local] or options[:bucket]
+        path = options[:bucket] || Puppet[:bucketdir]
+        @client = Puppet::FileBucket::Dipper.new(:Path => path)
+      else
+        @client = Puppet::FileBucket::Dipper.new(:Server => Puppet[:server])
+      end
+    rescue => detail
+      Puppet.log_exception(detail)
+      exit(1)
+    end
+  end
+end
+

data/vendor/gems/puppet-3.7.3/lib/puppet/application/help.rb

@@ -0,0 +1,4 @@
+require 'puppet/application/face_base'
+
+class Puppet::Application::Help < Puppet::Application::FaceBase
+end

data/vendor/gems/puppet-3.7.3/lib/puppet/application/indirection_base.rb

@@ -0,0 +1,4 @@
+require 'puppet/application/face_base'
+
+class Puppet::Application::IndirectionBase < Puppet::Application::FaceBase
+end

data/vendor/gems/puppet-3.7.3/lib/puppet/application/inspect.rb

@@ -0,0 +1,179 @@
+require 'puppet/application'
+
+class Puppet::Application::Inspect < Puppet::Application
+
+  run_mode :agent
+
+  option("--debug","-d")
+  option("--verbose","-v")
+
+  option("--logdest LOGDEST", "-l") do |arg|
+    handle_logdest_arg(arg)
+  end
+
+  def help
+    <<-'HELP'
+
+puppet-inspect(8) -- Send an inspection report
+========
+
+SYNOPSIS
+--------
+
+Prepares and submits an inspection report to the puppet master.
+
+
+USAGE
+-----
+puppet inspect [--archive_files] [--archive_file_server]
+
+
+DESCRIPTION
+-----------
+
+This command uses the cached catalog from the previous run of 'puppet
+agent' to determine which attributes of which resources have been
+marked as auditable with the 'audit' metaparameter. It then examines
+the current state of the system, writes the state of the specified
+resource attributes to a report, and submits the report to the puppet
+master.
+
+Puppet inspect does not run as a daemon, and must be run manually or
+from cron.
+
+
+OPTIONS
+-------
+
+Any configuration setting which is valid in the configuration file is
+also a valid long argument, e.g. '--server=master.domain.com'. See the
+configuration file documentation at
+http://docs.puppetlabs.com/references/latest/configuration.html for
+the full list of acceptable settings.
+
+* --archive_files:
+  During an inspect run, whether to archive files whose contents are audited to
+  a file bucket.
+
+* --archive_file_server:
+  During an inspect run, the file bucket server to archive files to if
+  archive_files is set.  The default value is '$server'.
+
+
+AUTHOR
+------
+
+Puppet Labs
+
+
+COPYRIGHT
+---------
+Copyright (c) 2011 Puppet Labs, LLC Licensed under the Apache 2.0 License
+
+    HELP
+  end
+
+  def setup
+    exit(Puppet.settings.print_configs ? 0 : 1) if Puppet.settings.print_configs?
+
+    raise "Inspect requires reporting to be enabled. Set report=true in puppet.conf to enable reporting." unless Puppet[:report]
+
+    @report = Puppet::Transaction::Report.new("inspect")
+
+    Puppet::Util::Log.newdestination(@report)
+    Puppet::Util::Log.newdestination(:console) unless options[:setdest]
+
+    Signal.trap(:INT) do
+      $stderr.puts "Exiting"
+      exit(1)
+    end
+
+    set_log_level
+
+    Puppet::Transaction::Report.indirection.terminus_class = :rest
+    Puppet::Resource::Catalog.indirection.terminus_class = :yaml
+  end
+
+  def preinit
+    require 'puppet'
+    require 'puppet/file_bucket/dipper'
+  end
+
+  def run_command
+    benchmark(:notice, "Finished inspection") do
+      retrieval_starttime = Time.now
+
+      unless catalog = Puppet::Resource::Catalog.indirection.find(Puppet[:certname])
+        raise "Could not find catalog for #{Puppet[:certname]}"
+      end
+
+      @report.configuration_version = catalog.version
+      @report.environment = Puppet[:environment]
+
+      inspect_starttime = Time.now
+      @report.add_times("config_retrieval", inspect_starttime - retrieval_starttime)
+
+      if Puppet[:archive_files]
+        dipper = Puppet::FileBucket::Dipper.new(:Server => Puppet[:archive_file_server])
+      end
+
+      catalog.to_ral.resources.each do |ral_resource|
+        audited_attributes = ral_resource[:audit]
+        next unless audited_attributes
+
+        status = Puppet::Resource::Status.new(ral_resource)
+
+        begin
+          audited_resource = ral_resource.to_resource
+        rescue StandardError => detail
+          ral_resource.log_exception(detail, "Could not inspect #{ral_resource}; skipping: #{detail}")
+          audited_attributes.each do |name|
+            event = ral_resource.event(
+                                       :property => name,
+                                       :status   => "failure",
+                                       :audited  => true,
+                                       :message  => "failed to inspect #{name}"
+                                       )
+            status.add_event(event)
+          end
+        else
+          audited_attributes.each do |name|
+            next if audited_resource[name].nil?
+            # Skip :absent properties of :absent resources. Really, it would be nicer if the RAL returned nil for those, but it doesn't. ~JW
+            if name == :ensure or audited_resource[:ensure] != :absent or audited_resource[name] != :absent
+              event = ral_resource.event(
+                                         :previous_value => audited_resource[name],
+                                         :property       => name,
+                                         :status         => "audit",
+                                         :audited        => true,
+                                         :message        => "inspected value is #{audited_resource[name].inspect}"
+                                         )
+              status.add_event(event)
+            end
+          end
+        end
+        if Puppet[:archive_files] and ral_resource.type == :file and audited_attributes.include?(:content)
+          path = ral_resource[:path]
+          if ::File.readable?(path)
+            begin
+              dipper.backup(path)
+            rescue StandardError => detail
+              Puppet.warning detail
+            end
+          end
+        end
+        @report.add_resource_status(status)
+      end
+
+      finishtime = Time.now
+      @report.add_times("inspect", finishtime - inspect_starttime)
+      @report.finalize_report
+
+      begin
+        Puppet::Transaction::Report.indirection.save(@report)
+      rescue => detail
+        Puppet.log_exception(detail, "Could not send report: #{detail}")
+      end
+    end
+  end
+end

data/vendor/gems/puppet-3.7.3/lib/puppet/application/instrumentation_data.rb

@@ -0,0 +1,7 @@
+require 'puppet/application/indirection_base'
+
+# NOTE: this is using an "old" naming convention (underscores instead of camel-case), for backwards
+#  compatibility with 2.7.x.  When the old naming convention is officially and publicly deprecated,
+#  this should be changed to camel-case.
+class Puppet::Application::Instrumentation_data < Puppet::Application::IndirectionBase
+end

data/vendor/gems/puppet-3.7.3/lib/puppet/application/instrumentation_listener.rb

@@ -0,0 +1,7 @@
+require 'puppet/application/indirection_base'
+
+# NOTE: this is using an "old" naming convention (underscores instead of camel-case), for backwards
+#  compatibility with 2.7.x.  When the old naming convention is officially and publicly deprecated,
+#  this should be changed to camel-case.
+class Puppet::Application::Instrumentation_listener < Puppet::Application::IndirectionBase
+end

data/vendor/gems/puppet-3.7.3/lib/puppet/application/instrumentation_probe.rb

@@ -0,0 +1,7 @@
+require 'puppet/application/indirection_base'
+
+# NOTE: this is using an "old" naming convention (underscores instead of camel-case), for backwards
+#  compatibility with 2.7.x.  When the old naming convention is officially and publicly deprecated,
+#  this should be changed to camel-case.
+class Puppet::Application::Instrumentation_probe < Puppet::Application::IndirectionBase
+end

data/vendor/gems/puppet-3.7.3/lib/puppet/application/key.rb

@@ -0,0 +1,4 @@
+require 'puppet/application/indirection_base'
+
+class Puppet::Application::Key < Puppet::Application::IndirectionBase
+end

data/vendor/gems/puppet-3.7.3/lib/puppet/application/kick.rb

@@ -0,0 +1,351 @@
+require 'puppet/application'
+
+class Puppet::Application::Kick < Puppet::Application
+
+  attr_accessor :hosts, :tags, :classes
+
+  option("--all","-a")
+  option("--foreground","-f")
+  option("--debug","-d")
+  option("--ping","-P")
+  option("--test")
+  option("--ignoreschedules")
+
+  option("--host HOST") do |arg|
+    @hosts << arg
+  end
+
+  option("--tag TAG", "-t") do |arg|
+    @tags << arg
+  end
+
+  option("--class CLASS", "-c") do |arg|
+    @classes << arg
+  end
+
+  option("--no-fqdn", "-n") do |arg|
+    options[:fqdn] = false
+  end
+
+  option("--parallel PARALLEL", "-p") do |arg|
+    begin
+      options[:parallel] = Integer(arg)
+    rescue
+      $stderr.puts "Could not convert #{arg.inspect} to an integer"
+      exit(23)
+    end
+  end
+
+  def help
+    <<-'HELP'
+
+puppet-kick(8) -- Remotely control puppet agent
+========
+
+SYNOPSIS
+--------
+Trigger a puppet agent run on a set of hosts.
+
+
+USAGE
+-----
+puppet kick [-a|--all] [-c|--class <class>] [-d|--debug] [-f|--foreground]
+  [-h|--help] [--host <host>] [--no-fqdn] [--ignoreschedules]
+  [-t|--tag <tag>] [--test] [-p|--ping] <host> [<host> [...]]
+
+
+DESCRIPTION
+-----------
+This script can be used to connect to a set of machines running 'puppet
+agent' and trigger them to run their configurations. The most common
+usage would be to specify a class of hosts and a set of tags, and
+'puppet kick' would look up in LDAP all of the hosts matching that
+class, then connect to each host and trigger a run of all of the objects
+with the specified tags.
+
+If you are not storing your host configurations in LDAP, you can specify
+hosts manually.
+
+You will most likely have to run 'puppet kick' as root to get access to
+the SSL certificates.
+
+'puppet kick' reads 'puppet master''s configuration file, so that it can
+copy things like LDAP settings.
+
+
+USAGE NOTES
+-----------
+Puppet kick needs the puppet agent on the target machine to be running as a
+daemon, be configured to listen for incoming network connections, and have an
+appropriate security configuration.
+
+The specific changes required are:
+
+* Set `listen = true` in the agent's `puppet.conf` file (or `--listen` on the
+  command line)
+* Configure the node's firewall to allow incoming connections on port 8139
+* Insert the following stanza at the top of the node's `auth.conf` file:
+
+        # Allow puppet kick access
+        path    /run
+        method  save
+        auth    any
+        allow   workstation.example.com
+
+This example would allow the machine `workstation.example.com` to trigger a
+Puppet run; adjust the "allow" directive to suit your site. You may also use
+`allow *` to allow anyone to trigger a Puppet run, but that makes it possible
+to interfere with your site by triggering excessive Puppet runs.
+
+See `http://docs.puppetlabs.com/guides/rest_auth_conf.html` for more details
+about security settings.
+
+OPTIONS
+-------
+Note that any setting that's valid in the configuration
+file is also a valid long argument. For example, 'ssldir' is a valid
+setting, so you can specify '--ssldir <directory>' as an
+argument.
+
+See the configuration file documentation at
+http://docs.puppetlabs.com/references/latest/configuration.html for
+the full list of acceptable parameters. A commented list of all
+configuration options can also be generated by running puppet master
+with '--genconfig'.
+
+* --all:
+  Connect to all available hosts. Requires LDAP support at this point.
+
+* --class:
+  Specify a class of machines to which to connect. This only works if
+  you have LDAP configured, at the moment.
+
+* --debug:
+  Enable full debugging.
+
+* --foreground:
+  Run each configuration in the foreground; that is, when connecting to
+  a host, do not return until the host has finished its run. The default
+  is false.
+
+* --help:
+  Print this help message
+
+* --host:
+  A specific host to which to connect. This flag can be specified more
+  than once.
+
+* --ignoreschedules:
+  Whether the client should ignore schedules when running its
+  configuration. This can be used to force the client to perform work it
+  would not normally perform so soon. The default is false.
+
+* --parallel:
+  How parallel to make the connections. Parallelization is provided by
+  forking for each client to which to connect. The default is 1, meaning
+  serial execution.
+
+* --puppetport:
+  Use the specified TCP port to connect to agents. Defaults to 8139.
+
+* --tag:
+  Specify a tag for selecting the objects to apply. Does not work with
+  the --test option.
+
+* --test:
+  Print the hosts you would connect to but do not actually connect. This
+  option requires LDAP support at this point.
+
+* --ping:
+  Do an ICMP echo against the target host. Skip hosts that don't respond
+  to ping.
+
+
+EXAMPLE
+-------
+    $ sudo puppet kick -p 10 -t remotefile -t webserver host1 host2
+
+
+AUTHOR
+------
+Luke Kanies
+
+
+COPYRIGHT
+---------
+Copyright (c) 2011 Puppet Labs, LLC Licensed under the Apache 2.0 License
+
+    HELP
+  end
+
+  def run_command
+    @hosts += command_line.args
+    options[:test] ? test : main
+  end
+
+  def test
+    puts "Skipping execution in test mode"
+    exit(0)
+  end
+
+  def main
+    Puppet.warning "Failed to load ruby LDAP library. LDAP functionality will not be available" unless Puppet.features.ldap?
+    require 'puppet/util/ldap/connection'
+
+    todo = @hosts.dup
+
+    failures = []
+
+    # Now do the actual work
+    go = true
+    while go
+      # If we don't have enough children in process and we still have hosts left to
+      # do, then do the next host.
+      if @children.length < options[:parallel] and ! todo.empty?
+        host = todo.shift
+        pid = safe_posix_fork do
+          run_for_host(host)
+        end
+        @children[pid] = host
+      else
+        # Else, see if we can reap a process.
+        begin
+          pid = Process.wait
+
+          if host = @children[pid]
+            # Remove our host from the list of children, so the parallelization
+            # continues working.
+            @children.delete(pid)
+            failures << host if $CHILD_STATUS.exitstatus != 0
+            print "#{host} finished with exit code #{$CHILD_STATUS.exitstatus}\n"
+          else
+            $stderr.puts "Could not find host for PID #{pid} with status #{$CHILD_STATUS.exitstatus}"
+          end
+        rescue Errno::ECHILD
+          # There are no children left, so just exit unless there are still
+          # children left to do.
+          next unless todo.empty?
+
+          if failures.empty?
+            puts "Finished"
+            exit(0)
+          else
+            puts "Failed: #{failures.join(", ")}"
+            exit(3)
+          end
+        end
+      end
+    end
+  end
+
+  def run_for_host(host)
+    if options[:ping]
+      %x{ping -c 1 #{host}}
+      unless $CHILD_STATUS == 0
+        $stderr.print "Could not contact #{host}\n"
+        exit($CHILD_STATUS)
+      end
+    end
+
+    require 'puppet/run'
+    Puppet::Run.indirection.terminus_class = :rest
+    port = Puppet[:puppetport]
+    url = ["https://#{host}:#{port}", "production", "run", host].join('/')
+
+    print "Triggering #{host}\n"
+    begin
+      run_options = {
+        :tags => @tags,
+        :background => ! options[:foreground],
+        :ignoreschedules => options[:ignoreschedules]
+      }
+      run = Puppet::Run.indirection.save(Puppet::Run.new( run_options ), url)
+      puts "Getting status"
+      result = run.status
+      puts "status is #{result}"
+    rescue => detail
+      Puppet.log_exception(detail, "Host #{host} failed: #{detail}\n")
+      exit(2)
+    end
+
+    case result
+    when "success";
+      exit(0)
+    when "running"
+      $stderr.puts "Host #{host} is already running"
+      exit(3)
+    else
+      $stderr.puts "Host #{host} returned unknown answer '#{result}'"
+      exit(12)
+    end
+  end
+
+  def initialize(*args)
+    super
+    @hosts = []
+    @classes = []
+    @tags = []
+  end
+
+  def preinit
+    [:INT, :TERM].each do |signal|
+      Signal.trap(signal) do
+        $stderr.puts "Cancelling"
+        exit(1)
+      end
+    end
+    options[:parallel] = 1
+    options[:verbose] = true
+    options[:fqdn] = true
+    options[:ignoreschedules] = false
+    options[:foreground] = false
+  end
+
+  def setup
+    super()
+    raise Puppet::Error.new("Puppet kick is not supported on Microsoft Windows") if Puppet.features.microsoft_windows?
+    Puppet.warning "Puppet kick is deprecated. See http://links.puppetlabs.com/puppet-kick-deprecation"
+
+    if options[:debug]
+      Puppet::Util::Log.level = :debug
+    else
+      Puppet::Util::Log.level = :info
+    end
+
+    if Puppet[:node_terminus] == :ldap and (options[:all] or @classes)
+      if options[:all]
+        @hosts = Puppet::Node.indirection.search("whatever", :fqdn => options[:fqdn]).collect { |node| node.name }
+        puts "all: #{@hosts.join(", ")}"
+      else
+        @hosts = []
+        @classes.each do |klass|
+          list = Puppet::Node.indirection.search("whatever", :fqdn => options[:fqdn], :class => klass).collect { |node| node.name }
+          puts "#{klass}: #{list.join(", ")}"
+
+          @hosts += list
+        end
+      end
+    elsif ! @classes.empty?
+      $stderr.puts "You must be using LDAP to specify host classes"
+      exit(24)
+    end
+
+    @children = {}
+
+    # If we get a signal, then kill all of our children and get out.
+    [:INT, :TERM].each do |signal|
+      Signal.trap(signal) do
+        Puppet.notice "Caught #{signal}; shutting down"
+        @children.each do |pid, host|
+          Process.kill("INT", pid)
+        end
+
+        waitall
+
+        exit(1)
+      end
+    end
+
+  end
+
+end