puppet 0.18.4 → 0.22.4

data/lib/puppet/provider/service/redhat.rb

@@ -0,0 +1,59 @@
+# Manage debian services.  Start/stop is the same as InitSvc, but enable/disable
+# is special.
+Puppet::Type.type(:service).provide :redhat, :parent => :init do
+    desc "Red Hat's (and probably many others) form of ``init``-style service
+        management; uses ``chkconfig`` for service enabling and disabling."
+
+    commands :chkconfig => "/sbin/chkconfig"
+
+    defaultfor :operatingsystem => [:redhat, :fedora, :suse]
+
+    def self.defpath
+        superclass.defpath
+    end
+
+    if self.suitable?
+        Puppet.type(:service).newpath(:redhat, defpath())
+    end
+
+    # Remove the symlinks
+    def disable
+        begin
+            output = chkconfig(@model[:name], :off)
+            output += chkconfig("--del", @model[:name])
+        rescue Puppet::ExecutionFailure
+            raise Puppet::Error, "Could not disable %s: %s" %
+                [self.name, output]
+        end
+    end
+
+    def enabled?
+        begin
+            output = chkconfig(@model[:name])
+        rescue Puppet::ExecutionFailure
+            return :false
+        end
+
+        # If it's disabled on SuSE, then it will print output showing "off"
+        # at the end
+        if output =~ /.* off$/
+            return :false
+        end
+	
+        return :true
+    end
+
+    # Don't support them specifying runlevels; always use the runlevels
+    # in the init scripts.
+    def enable
+        begin
+            output = chkconfig("--add", @model[:name])
+            output += chkconfig(@model[:name], :on)
+        rescue Puppet::ExecutionFailure => detail
+            raise Puppet::Error, "Could not enable %s: %s" %
+                [self.name, detail]
+        end
+    end
+end
+
+# $Id: redhat.rb 2330 2007-03-19 22:13:09Z luke $

data/lib/puppet/{type → provider}/service/smf.rb

@@ -1,5 +1,14 @@
 # Solaris 10 SMF-style services.
-Puppet.type(:service).newsvctype(:smf) do
+Puppet::Type.type(:service).provide :smf, :parent => :base do
+    desc "Support for Sun's new Service Management Framework.  Starting a service
+        is effectively equivalent to enabling it, so there is only support
+        for starting and stopping services, which also enables and disables them,
+        respectively."
+
+    defaultfor :operatingsystem => :solaris
+
+    commands :adm => "/usr/sbin/svcadm", :svcs => "/usr/bin/svcs"
+
     def enable
         self.start
     end
@@ -18,19 +27,26 @@ Puppet.type(:service).newsvctype(:smf) do
     end
 
     def restartcmd
-        "svcadm restart %s" % self[:name]
+        [command(:adm), :restart, @model[:name]]
     end
 
     def startcmd
-        "svcadm enable %s" % self[:name]
+        [command(:adm), :enable, @model[:name]]
     end
 
     def status
-        if self[:status]
+        if @model[:status]
             super
             return
         end
-        %x{/usr/bin/svcs -l #{self[:name]} 2>/dev/null}.split("\n").each { |line|
+        begin
+            output = svcs "-l", @model[:name]
+        rescue Puppet::ExecutionFailure
+            warning "Could not get status on service %s" % self.name
+            return :stopped
+        end
+
+        output.split("\n").each { |line|
             var = nil
             value = nil
             if line =~ /^(\w+)\s+(.+)/
@@ -38,6 +54,7 @@ Puppet.type(:service).newsvctype(:smf) do
                 value = $2
             else
                 Puppet.err "Could not match %s" % line.inspect
+                next
             end
             case var
             when "state":
@@ -58,17 +75,11 @@ Puppet.type(:service).newsvctype(:smf) do
                 end
             end
         }
-
-        if $? != 0
-            #raise Puppet::Error,
-            warning "Could not get status on service %s" % self.name
-            return :stopped
-        end
     end
 
     def stopcmd
-        "svcadm disable %s" % self[:name]
+        [command(:adm), :disable, @model[:name]]
     end
 end
 
-# $Id: smf.rb 1375 2006-07-06 17:59:30Z luke $
+# $Id: smf.rb 2284 2007-03-17 02:50:48Z luke $

data/lib/puppet/provider/sshkey/parsed.rb

@@ -0,0 +1,36 @@
+require 'puppet/provider/parsedfile'
+
+known = nil
+case Facter.value(:operatingsystem)
+when "Darwin": known = "/etc/ssh_known_hosts"
+else
+    known = "/etc/ssh/ssh_known_hosts"
+end
+
+Puppet::Type.type(:sshkey).provide(:parsed,
+    :parent => Puppet::Provider::ParsedFile,
+    :default_target => known,
+    :filetype => :flat
+) do
+    text_line :comment, :match => /^#/
+    text_line :blank, :match => /^\s+/
+
+    record_line :parsed, :fields => %w{name type key},
+        :post_parse => proc { |hash|
+            if hash[:name] =~ /,/
+                names = hash[:name].split(",")
+                hash[:name] = names.shift
+                hash[:alias] = names
+            end
+        },
+        :pre_gen => proc { |hash|
+            if hash[:alias]
+                names = [hash[:name], hash[:alias]].flatten
+                
+                hash[:name] = [hash[:name], hash[:alias]].flatten.join(",")
+                hash.delete(:alias)
+            end
+        }
+end
+
+# $Id: parsed.rb 2281 2007-03-14 17:49:19Z luke $

data/lib/puppet/provider/user/netinfo.rb

@@ -0,0 +1,106 @@
+# Manage NetInfo POSIX objects.  Probably only used on OS X, but I suppose
+# it could be used elsewhere.
+require 'puppet/provider/nameservice/netinfo'
+
+Puppet::Type.type(:user).provide :netinfo, :parent => Puppet::Provider::NameService::NetInfo do
+    desc "User management in NetInfo.  Note that NetInfo is not smart enough to fill in default information
+        for users, so this provider will use default settings for home (``/var/empty``), shell (``/usr/bin/false``),
+        comment (the user name, capitalized), and password ('********').  These defaults are only used when the user is created.
+        Note that password management probably does not really work -- OS X does not store the password in NetInfo itself,
+        yet we cannot figure out how to store the encrypted password where OS X will look for it.  The main reason the password
+        support is even there is so that a default password is created, which effectively locks people out, even if it does not
+        enable us to set a password."
+    commands :nireport => "nireport", :niutil => "niutil"
+
+    options :comment, :key => "realname"
+    options :password, :key => "passwd"
+
+    defaultfor :operatingsystem => :darwin
+
+    autogen_defaults :home => "/var/empty", :shell => "/usr/bin/false", :password => '********'
+
+    has_features :manages_passwords
+
+    verify :gid, "GID must be an integer" do |value|
+        value.is_a? Integer
+    end
+
+    verify :uid, "UID must be an integer" do |value|
+        value.is_a? Integer
+    end
+
+    def autogen_comment
+        return @model[:name].capitalize
+    end
+
+    # The list of all groups the user is a member of.  Different
+    # user mgmt systems will need to override this method.
+    def groups
+        groups = []
+
+        user = @model[:name]
+        # Retrieve them all from netinfo
+        open("| #{command(:nireport)} / /groups name users") do |file|
+            file.each do |line|
+                name, members = line.split(/\s+/)
+                next unless members
+                next if members =~ /NoValue/
+                members = members.split(",")
+
+                if members.include? user
+                    groups << name
+                end
+            end
+        end
+
+        groups.join(",")
+    end
+
+    # This is really lame.  We have to iterate over each
+    # of the groups and add us to them.
+    def groups=(groups)
+        case groups
+        when Fixnum:
+            groups = [groups.to_s]
+        when String
+            groups = groups.split(/\s*,\s*/)
+        else
+            raise Puppet::DevError, "got invalid groups value %s of type %s" % [groups.class, groups]
+        end
+        # Get just the groups we need to modify
+        diff = groups - (@is || [])
+
+        data = {}
+        open("| #{command(:nireport)} / /groups name users") do |file|
+            file.each do |line|
+                name, members = line.split(/\s+/)
+
+                if members.nil? or members =~ /NoValue/
+                    data[name] = []
+                else
+                    # Add each diff group's current members
+                    data[name] = members.split(/,/)
+                end
+            end
+        end
+
+        user = @model[:name]
+        data.each do |name, members|
+            if members.include? user and groups.include? name
+                # I'm in the group and should be
+                next
+            elsif members.include? user
+                # I'm in the group and shouldn't be
+                setuserlist(name, members - [user])
+            elsif groups.include? name
+                # I'm not in the group and should be
+                setuserlist(name, members + [user])
+            else
+                # I'm not in the group and shouldn't be
+                next
+            end
+        end
+    end
+end
+
+# $Id: netinfo.rb 2415 2007-04-25 21:44:22Z luke $

data/lib/puppet/provider/user/pw.rb

@@ -0,0 +1,41 @@
+require 'puppet/provider/nameservice/pw'
+
+Puppet::Type.type(:user).provide :pw, :parent => Puppet::Provider::NameService::PW do
+    desc "User management via ``pw`` on FreeBSD."
+
+    commands :pw => "pw"
+
+    defaultfor :operatingsystem => :freebsd
+
+    options :home, :flag => "-d", :method => :dir
+    options :comment, :method => :gecos
+    options :groups, :flag => "-G"
+
+    verify :gid, "GID must be an integer" do |value|
+        value.is_a? Integer
+    end
+
+    verify :groups, "Groups must be comma-separated" do |value|
+        value !~ /\s/
+    end
+
+    def addcmd
+        cmd = [command(:pw), "useradd", @model[:name]]
+        @model.class.validproperties.each do |property|
+            next if property == :ensure
+            # the value needs to be quoted, mostly because -c might
+            # have spaces in it
+            if value = @model.should(property) and value != ""
+                cmd << flag(property) << value
+            end
+        end
+
+        if @model[:allowdupe] == :true
+            cmd << "-o"
+        end
+
+        return cmd
+    end
+end
+
+# $Id: pw.rb 2169 2007-02-07 06:47:10Z luke $

data/lib/puppet/provider/user/useradd.rb

@@ -0,0 +1,67 @@
+require 'puppet/provider/nameservice/objectadd'
+
+Puppet::Type.type(:user).provide :useradd, :parent => Puppet::Provider::NameService::ObjectAdd do
+    desc "User management via ``useradd`` and its ilk.  Note that you'll have to install the ``Shadow Password`` library to manage user passwords."
+
+    commands :add => "useradd", :delete => "userdel", :modify => "usermod"
+
+    options :home, :flag => "-d", :method => :dir
+    options :comment, :method => :gecos
+    options :groups, :flag => "-G"
+
+    verify :gid, "GID must be an integer" do |value|
+        value.is_a? Integer
+    end
+
+    verify :groups, "Groups must be comma-separated" do |value|
+        value !~ /\s/
+    end
+
+    has_features :manages_homedir, :allows_duplicates
+
+    if Puppet.features.libshadow? and case Facter.value(:kernel)
+        when "Linux": true
+        else
+            false
+        end
+
+        has_features :manages_passwords
+    end
+
+    def addcmd
+        cmd = [command(:add)]
+        @model.class.validproperties.each do |property|
+            next if property == :ensure
+            # the value needs to be quoted, mostly because -c might
+            # have spaces in it
+            if value = @model.should(property) and value != ""
+                cmd << flag(property) << value
+            end
+        end
+
+        if @model.allowdupe?
+            cmd << "-o"
+        end
+
+        if @model.managehome?
+            cmd << "-m"
+        elsif %w{Fedora RedHat}.include?(Facter.value("operatingsystem"))
+            cmd << "-M"
+        end
+
+        cmd << @model[:name]
+
+        cmd
+    end
+
+    # Retrieve the password using the Shadow Password library
+    def password
+        if ent = Shadow::Passwd.getspnam(@model.name)
+            return ent.sp_pwdp
+        else
+            return :absent
+        end
+    end
+end
+
+# $Id: useradd.rb 2414 2007-04-25 20:59:00Z luke $

data/lib/puppet/provider/zone/solaris.rb

@@ -0,0 +1,208 @@
+Puppet::Type.type(:zone).provide(:solaris) do
+    desc "Provider for Solaris Zones."
+
+    commands :adm => "/usr/sbin/zoneadm", :cfg => "/usr/sbin/zonecfg"
+    defaultfor :operatingsystem => :solaris
+
+    # Convert the output of a list into a hash
+    def self.line2hash(line)
+        fields = [:id, :name, :ensure, :path]
+
+        hash = {}
+        line.split(":").each_with_index { |value, index|
+            hash[fields[index]] = value
+        }
+
+        # Configured but not installed zones do not have IDs
+        if hash[:id] == "-"
+            hash.delete(:id)
+        end
+
+        return hash
+    end
+
+    def self.list
+        adm(:list, "-cp").split("\n").collect do |line|
+            hash = line2hash(line)
+
+            obj = nil
+            unless obj = @model[hash[:name]]
+                obj = @model.create(:name => hash[:name])
+            end
+
+            obj.setstatus(hash)
+
+            obj
+        end
+    end
+
+    # Perform all of our configuration steps.
+    def configure
+        # If the thing is entirely absent, then we need to create the config.
+        str = %{create -b
+set zonepath=%s
+} % @model[:path]
+
+        # Then perform all of our configuration steps.  It's annoying
+        # that we need this much internal info on the model.
+        @model.send(:properties).each do |property|
+            if property.is_a? ZoneConfigProperty and ! property.insync?
+                str += property.configtext + "\n"
+            end
+        end
+
+        str += "commit\n"
+        setconfig(str)
+    end
+
+    def destroy
+        zonecfg :delete, "-F"
+    end
+
+    def install
+        zoneadm :install
+    end
+
+    # We need a way to test whether a zone is in process.  Our 'ensure'
+    # property models the static states, but we need to handle the temporary ones.
+    def processing?
+        if hash = statushash()
+            case hash[:ensure]
+            when "incomplete", "ready", "shutting_down"
+                true
+            else
+                false
+            end
+        else
+            false
+        end
+    end
+
+    # Collect the configuration of the zone.
+    def getconfig
+        output = zonecfg :info
+
+        name = nil
+        current = nil
+        hash = {}
+        output.split("\n").each do |line|
+            case line
+            when /^(\S+):\s*$/:
+                name = $1
+                current = nil # reset it
+            when /^(\S+):\s*(.+)$/:
+                hash[$1.intern] = $2
+                #self.is = [$1.intern, $2]
+            when /^\s+(\S+):\s*(.+)$/:
+                if name
+                    unless hash.include? name
+                        hash[name] = []
+                    end
+
+                    unless current
+                        current = {}
+                        hash[name] << current
+                    end
+                    current[$1.intern] = $2
+                else
+                    err "Ignoring '%s'" % line
+                end
+            else
+                debug "Ignoring zone output '%s'" % line
+            end
+        end
+        return hash
+    end
+
+    def retrieve
+        if hash = statushash()
+            setstatus(hash)
+
+            # Now retrieve the configuration itself and set appropriately.
+            getconfig()
+        else
+            @properties.each do |name, property|
+                property.is = :absent
+            end
+        end
+    end
+
+    # Execute a configuration string.  Can't be private because it's called
+    # by the properties.
+    def setconfig(str)
+        command = "#{command(:cfg)} -z %s -f -" % @model[:name]
+        debug "Executing '%s' in zone %s with '%s'" % [command, @model[:name], str]
+        IO.popen(command, "w") do |pipe|
+            pipe.puts str
+        end
+
+        unless $? == 0
+            raise ArgumentError, "Failed to apply configuration"
+        end
+    end
+
+    def start
+        # Check the sysidcfg stuff
+        if cfg = @model[:sysidcfg]
+            path = File.join(@model[:path], "root", "etc", "sysidcfg")
+
+            unless File.exists?(path)
+                begin
+                    File.open(path, "w", 0600) do |f|
+                        f.puts cfg
+                    end
+                rescue => detail
+                    if Puppet[:debug]
+                        puts detail.stacktrace
+                    end
+                    raise Puppet::Error, "Could not create sysidcfg: %s" % detail
+                end
+            end
+        end
+
+        zoneadm :boot
+    end
+
+    # Return a hash of the current status of this zone.
+    def statushash
+        begin
+            output = adm "-z", @model[:name], :list, "-p"
+        rescue Puppet::ExecutionFailure
+            return nil
+        end
+
+        return self.class.line2hash(output.chomp)
+    end
+
+    def stop
+        zoneadm :halt
+    end
+
+    def unconfigure
+        zonecfg :delete, "-F"
+    end
+
+    def uninstall
+        zoneadm :uninstall, "-F"
+    end
+
+    private
+
+    def zoneadm(*cmd)
+        begin
+            adm("-z", @model[:name], *cmd)
+        rescue Puppet::ExecutionFailure => detail
+            self.fail "Could not %s zone: %s" % [cmd[0], detail]
+        end
+    end
+
+    def zonecfg(*cmd)
+        begin
+            cfg("-z", @model[:name], *cmd)
+        rescue Puppet::ExecutionFailure => detail
+            self.fail "Could not %s zone: %s" % [cmd[0], detail]
+        end
+    end
+end
+
+# $Id: solaris.rb 2169 2007-02-07 06:47:10Z luke $