puppet 6.23.0 → 7.0.0

data/lib/puppet/face/status.rb

@@ -1,51 +0,0 @@
-require 'puppet/indirector/face'
-
-Puppet::Indirector::Face.define(:status, '0.0.1') do
-  copyright "Puppet Inc.", 2011
-  license   _("Apache 2 license; see COPYING")
-
-  summary _("View puppet server status.")
-
-  deactivate_action(:destroy)
-  deactivate_action(:save)
-  deactivate_action(:search)
-
-  find = get_action(:find)
-  find.default = true
-  find.summary _("Check status of puppet master server.")
-  #TRANSLATORS the string 'Puppet::Status' is a Puppet language object and should not be translated
-  find.returns _(<<-'EOT')
-    A "true" response or a low-level connection error. When used from the Ruby
-    API: returns a Puppet::Status object.
-  EOT
-  find.description <<-'EOT'
-    Checks whether a Puppet server is properly receiving and processing
-    HTTP requests. This action is only useful when used with '--terminus
-    rest'; when invoked with the `local` terminus, `find` will always
-    return true.
-
-    Over REST, this action will query the configured puppet master by default.
-    To query other servers, including puppet agent nodes started with the
-    <--listen> option, you can set the global <--server> and <--serverport>
-    options on the command line; note that agent nodes listen on port 8139.
-  EOT
-  find.short_description <<-EOT
-    Checks whether a Puppet server is properly receiving and processing HTTP
-    requests. This action is only useful when used with '--terminus rest',
-    and will always return true when invoked locally.
-  EOT
-  find.notes <<-'EOT'
-    This action requires that the server's `auth.conf` file allow find
-    access to the `status` REST terminus. Puppet agent does not use this
-    facility, and it is turned off by default. See
-    <https://puppet.com/docs/puppet/latest/config_file_auth.html>
-    for more details.
-  EOT
-  find.examples <<-'EOT'
-    Check the status of the configured puppet master:
-
-    $ puppet status find --terminus rest
-  EOT
-
-  deprecate
-end

data/lib/puppet/ffi/posix.rb

@@ -1,10 +0,0 @@
-require 'ffi'
-
-module Puppet
-  module FFI
-    module POSIX
-      require 'puppet/ffi/posix/functions'
-      require 'puppet/ffi/posix/constants'
-    end
-  end
-end

data/lib/puppet/ffi/posix/constants.rb

@@ -1,14 +0,0 @@
-require 'puppet/ffi/posix'
-
-module Puppet::FFI::POSIX
-  module Constants
-    extend FFI::Library
-  
-    # Maximum number of supplementary groups (groups
-    # that a user can be in plus its primary group)
-    # (64 + 1 primary group)
-    # Chosen a reasonable middle number from the list
-    # https://www.j3e.de/ngroups.html
-    MAXIMUM_NUMBER_OF_GROUPS = 65
-  end
-end

data/lib/puppet/ffi/posix/functions.rb

@@ -1,24 +0,0 @@
-require 'puppet/ffi/posix'
-
-module Puppet::FFI::POSIX
-  module Functions
-
-    extend FFI::Library
-
-    ffi_convention :stdcall
-
-    # https://man7.org/linux/man-pages/man3/getgrouplist.3.html
-    # int getgrouplist (
-    #   const char *user,
-    #   gid_t group,
-    #   gid_t *groups,
-    #   int *ngroups
-    # );
-    begin
-      ffi_lib FFI::Library::LIBC
-      attach_function :getgrouplist, [:string, :uint, :pointer, :pointer], :int
-    rescue FFI::NotFoundError
-      # Do nothing
-    end
-  end
-end

data/lib/puppet/indirector/certificate/file.rb

@@ -1,9 +0,0 @@
-require 'puppet/indirector/ssl_file'
-require 'puppet/ssl/certificate'
-
-# @deprecated
-class Puppet::SSL::Certificate::File < Puppet::Indirector::SslFile
-  desc "Manage SSL certificates on disk."
-
-  store_in :certdir
-end

data/lib/puppet/indirector/certificate/rest.rb

@@ -1,18 +0,0 @@
-require 'puppet/ssl/certificate'
-require 'puppet/indirector/rest'
-
-# @deprecated
-class Puppet::SSL::Certificate::Rest < Puppet::Indirector::REST
-  desc "Find certificates over HTTP via REST."
-
-  use_server_setting(:ca_server)
-  use_port_setting(:ca_port)
-  use_srv_service(:ca)
-
-  def find(request)
-    result = super
-    return nil unless result
-    result.name = request.key unless result.name == request.key
-    result
-  end
-end

data/lib/puppet/indirector/certificate_request/file.rb

@@ -1,9 +0,0 @@
-require 'puppet/indirector/ssl_file'
-require 'puppet/ssl/certificate_request'
-
-# @deprecated
-class Puppet::SSL::CertificateRequest::File < Puppet::Indirector::SslFile
-  desc "Manage the collection of certificate requests on disk."
-
-  store_in :requestdir
-end

data/lib/puppet/indirector/certificate_request/memory.rb

@@ -1,7 +0,0 @@
-require 'puppet/ssl/certificate_request'
-require 'puppet/indirector/memory'
-
-# @deprecated
-class Puppet::SSL::CertificateRequest::Memory < Puppet::Indirector::Memory
-  desc "Store certificate requests in memory. This is used for testing puppet."
-end

data/lib/puppet/indirector/certificate_request/rest.rb

@@ -1,11 +0,0 @@
-require 'puppet/ssl/certificate_request'
-require 'puppet/indirector/rest'
-
-# @deprecated
-class Puppet::SSL::CertificateRequest::Rest < Puppet::Indirector::REST
-  desc "Find and save certificate requests over HTTP via REST."
-
-  use_server_setting(:ca_server)
-  use_port_setting(:ca_port)
-  use_srv_service(:ca)
-end

data/lib/puppet/indirector/file_content/http.rb

@@ -1,22 +0,0 @@
-require 'puppet/file_serving/metadata'
-require 'puppet/indirector/generic_http'
-require 'puppet/network/http'
-
-class Puppet::Indirector::FileContent::Http < Puppet::Indirector::GenericHttp
-  desc "Retrieve file contents from a remote HTTP server."
-
-  include Puppet::FileServing::TerminusHelper
-  include Puppet::Network::HTTP::Compression.module
-
-  @http_method = :get
-
-  def initialize
-    Puppet.deprecation_warning(_("Puppet::Indirector::FileContent::Http is deprecated. Use Puppet::HTTP::Client instead."))
-    super
-  end
-
-  def find(request)
-    response = super
-    model.from_binary(uncompress_body(response))
-  end
-end

data/lib/puppet/indirector/key/file.rb

@@ -1,46 +0,0 @@
-require 'puppet/indirector/ssl_file'
-require 'puppet/ssl/key'
-
-# @deprecated
-class Puppet::SSL::Key::File < Puppet::Indirector::SslFile
-  desc "Manage SSL private and public keys on disk."
-
-  store_in :privatekeydir
-
-  def allow_remote_requests?
-    false
-  end
-
-  # Where should we store the public key?
-  def public_key_path(name)
-    File.join(Puppet[:publickeydir], name.to_s + ".pem")
-  end
-
-  # Remove the public key, in addition to the private key
-  def destroy(request)
-    super
-
-    key_path = Puppet::FileSystem.pathname(public_key_path(request.key))
-    return unless Puppet::FileSystem.exist?(key_path)
-
-    begin
-      Puppet::FileSystem.unlink(key_path)
-    rescue => detail
-      raise Puppet::Error, _("Could not remove %{request} public key: %{detail}") % { request: request.key, detail: detail }, detail.backtrace
-    end
-  end
-
-  # Save the public key, in addition to the private key.
-  def save(request)
-    super
-
-    begin
-      # RFC 1421 states PEM is 7-bit ASCII https://tools.ietf.org/html/rfc1421
-      Puppet.settings.setting(:publickeydir).open_file(public_key_path(request.key), 'w:ASCII') do |f|
-        f.print request.instance.content.public_key.to_pem
-      end
-    rescue => detail
-      raise Puppet::Error, _("Could not write %{request}: %{detail}") % { request: request.key, detail: detail }, detail.backtrace
-    end
-  end
-end

data/lib/puppet/indirector/key/memory.rb

@@ -1,7 +0,0 @@
-require 'puppet/ssl/key'
-require 'puppet/indirector/memory'
-
-# @deprecated
-class Puppet::SSL::Key::Memory < Puppet::Indirector::Memory
-  desc "Store keys in memory. This is used for testing puppet."
-end

data/lib/puppet/indirector/ssl_file.rb

@@ -1,162 +0,0 @@
-require 'puppet/ssl'
-
-class Puppet::Indirector::SslFile < Puppet::Indirector::Terminus
-  # Specify the directory in which multiple files are stored.
-  def self.store_in(setting)
-    @directory_setting = setting
-  end
-
-  # Specify a single file location for storing just one file.
-  # This is used for things like the CRL.
-  def self.store_at(setting)
-    @file_setting = setting
-  end
-
-  class << self
-    attr_reader :directory_setting, :file_setting
-  end
-
-  # The full path to where we should store our files.
-  def self.collection_directory
-    return nil unless directory_setting
-    Puppet.settings[directory_setting]
-  end
-
-  # The full path to an individual file we would be managing.
-  def self.file_location
-    return nil unless file_setting
-    Puppet.settings[file_setting]
-  end
-
-  def initialize
-    Puppet.settings.use(:main, :ssl)
-
-    (collection_directory || file_location) or raise Puppet::DevError, _("No file or directory setting provided; terminus %{class_name} cannot function") % { class_name: self.class.name }
-  end
-
-  def path(name)
-    if name =~ Puppet::Indirector::BadNameRegexp then
-      Puppet.crit(_("directory traversal detected in %{indirection}: %{name}") % { indirection: self.class, name: name.inspect })
-      raise ArgumentError, _("invalid key")
-    end
-
-    if collection_directory
-      File.join(collection_directory, name.to_s + ".pem")
-    else
-      file_location
-    end
-  end
-
-  # Remove our file.
-  def destroy(request)
-    path = Puppet::FileSystem.pathname(path(request.key))
-    return false unless Puppet::FileSystem.exist?(path)
-
-    Puppet.notice _("Removing file %{model} %{request} at '%{path}'") % { model: model, request: request.key, path: path }
-    begin
-      Puppet::FileSystem.unlink(path)
-    rescue => detail
-      raise Puppet::Error, _("Could not remove %{request}: %{detail}") % { request: request.key, detail: detail }, detail.backtrace
-    end
-  end
-
-  # Find the file on disk, returning an instance of the model.
-  def find(request)
-    filename = rename_files_with_uppercase(path(request.key))
-
-    filename ? create_model(request.key, filename) : nil
-  end
-
-  # Save our file to disk.
-  def save(request)
-    path = path(request.key)
-    dir = File.dirname(path)
-
-    raise Puppet::Error.new(_("Cannot save %{request}; parent directory %{dir} does not exist") % { request: request.key, dir: dir }) unless FileTest.directory?(dir)
-    raise Puppet::Error.new(_("Cannot save %{request}; parent directory %{dir} is not writable") % { request: request.key, dir: dir }) unless FileTest.writable?(dir)
-
-    write(request.key, path) { |f| f.print request.instance.to_s }
-  end
-
-  # Search for more than one file.  At this point, it just returns
-  # an instance for every file in the directory.
-  def search(request)
-    dir = collection_directory
-    Dir.entries(dir).
-      select  { |file| file =~ /\.pem$/ }.
-      collect { |file| create_model(file.sub(/\.pem$/, ''), File.join(dir, file)) }.
-      compact
-  end
-
-  private
-
-  def create_model(name, path)
-    result = model.new(name)
-    # calls Puppet::SSL::Base#read for subclasses of Puppet::SSL::Base
-    # with the exception of any overrides, like Puppet::SSL::Key
-    result.read(path)
-    result
-  end
-
-  # Demeterish pointers to class info.
-  def collection_directory
-    self.class.collection_directory
-  end
-
-  def file_location
-    self.class.file_location
-  end
-
-  # A hack method to deal with files that exist with a different case.
-  # Just renames it; doesn't read it in or anything.
-  # LAK:NOTE This is a copy of the method in sslcertificates/support.rb,
-  # which we'll be EOL'ing at some point.  This method was added at 20080702
-  # and should be removed at some point.
-  def rename_files_with_uppercase(file)
-    return file if Puppet::FileSystem.exist?(file)
-
-    dir, short = File.split(file)
-    return nil unless Puppet::FileSystem.exist?(dir)
-
-    raise ArgumentError, _("Tried to fix SSL files to a file containing uppercase") unless short.downcase == short
-    real_file = Dir.entries(dir).reject { |f| f =~ /^\./ }.find do |other|
-      other.downcase == short
-    end
-
-    return nil unless real_file
-
-    full_file = File.join(dir, real_file)
-
-    Puppet.deprecation_warning _("Automatic downcasing and renaming of ssl files is deprecated; please request the file using its correct case: %{full_file}") % { full_file: full_file }
-    File.rename(full_file, file)
-
-    file
-  end
-
-  # Yield a filehandle set up appropriately, either with our settings doing
-  # the work or opening a filehandle manually.
-  def write(name, path)
-    # All types serialized to disk contain only ASCII content:
-    # * SSL::Key may be a .export(OpenSSL::Cipher::DES.new(:EDE3, :CBC), pass) or .to_pem
-    # * All other classes are translated to strings by calling .to_pem
-    if file_location
-      Puppet.settings.setting(self.class.file_setting).open('w:ASCII') { |f| yield f }
-    else
-      setting = self.class.directory_setting
-      if setting
-        begin
-          Puppet.settings.setting(setting).open_file(path, 'w:ASCII') { |f| yield f }
-        rescue => detail
-          raise Puppet::Error, _("Could not write %{path} to %{setting}: %{detail}") % { path: path, setting: setting, detail: detail }, detail.backtrace
-        end
-      else
-        raise Puppet::DevError, _("You must provide a setting to determine where the files are stored")
-      end
-    end
-  end
-end
-
-# LAK:NOTE This has to be at the end, because classes like SSL::Key use this
-# class, and this require statement loads those, which results in a load loop
-# and lots of failures.
-require 'puppet/ssl/host'

data/lib/puppet/indirector/status.rb

@@ -1,3 +0,0 @@
-# A stub class, so our constants work.
-class Puppet::Indirector::Status
-end

data/lib/puppet/indirector/status/local.rb

@@ -1,12 +0,0 @@
-require 'puppet/indirector/status'
-
-class Puppet::Indirector::Status::Local < Puppet::Indirector::Code
-
-  desc "Get status locally. Only used internally."
-
-  def find( *anything )
-    status = model.new
-    status.version= Puppet.version
-    status
-  end
-end

data/lib/puppet/indirector/status/rest.rb

@@ -1,27 +0,0 @@
-require 'puppet/indirector/status'
-require 'puppet/indirector/rest'
-
-class Puppet::Indirector::Status::Rest < Puppet::Indirector::REST
-
-  desc "Get puppet master's status via REST. Useful because it tests the health
-    of both the web server and the indirector."
-
-  def find(request)
-    return super unless use_http_client?
-
-    session = Puppet.lookup(:http_session)
-    api = session.route_to(:puppet)
-    _, status = api.get_status(request.key)
-    status
-  rescue Puppet::HTTP::ResponseError => e
-    if e.response.code == 404
-      return nil unless request.options[:fail_on_404]
-
-      _, body = parse_response(e.response.nethttp)
-      msg = _("Find %{uri} resulted in 404 with the message: %{body}") % { uri: elide(e.response.url.path, 100), body: body }
-      raise Puppet::Error, msg
-    else
-      raise convert_to_http_error(e.response.nethttp)
-    end
-  end
-end