server_maint 0.0.3 → 0.0.4

data/lib/cookbooks/postgresql/README.md

@@ -0,0 +1,148 @@
+Description
+===========
+
+Installs and configures PostgreSQL as a client or a server.
+
+Requirements
+============
+
+## Platforms
+
+* Debian, Ubuntu
+* Red Hat/CentOS/Scientific (6.0+ required) - "EL6-family"
+* Fedora
+* SUSE
+
+Tested on:
+
+* Ubuntu 10.04, 11.10, 12.04
+* Red Hat 6.1, Scientific 6.1, CentOS 6.3
+
+## Cookboooks
+
+Requires Opscode's `openssl` cookbook for secure password generation.
+
+Requires a C compiler and development headers in order to build the
+`pg` RubyGem to provide Ruby bindings in the `ruby` recipe.
+
+Opscode's `build-essential` cookbook provides this functionality on
+Debian, Ubuntu, and EL6-family.
+
+While not required, Opscode's `database` cookbook contains resources
+and providers that can interact with a PostgreSQL database. This
+cookbook is a dependency of database.
+
+Attributes
+==========
+
+The following attributes are set based on the platform, see the
+`attributes/default.rb` file for default values.
+
+* `node['postgresql']['version']` - version of postgresql to manage
+* `node['postgresql']['dir']` - home directory of where postgresql
+  data and configuration lives.
+
+* `node['postgresql']['client']['packages']` - An array of package names
+  that should be installed on "client" systems.
+* `node['postgresql']['server']['packages']` - An array of package names
+  that should be installed on "server" systems.
+
+
+The following attributes are generated in
+`recipe[postgresql::server]`.
+
+* `node['postgresql']['password']['postgres']` - randomly generated
+  password by the `openssl` cookbook's library.
+* `node['postgresql']['ssl']` - whether to enable SSL (off for version
+  8.3, true for 8.4).
+
+Recipes
+=======
+
+default
+-------
+
+Includes the client recipe.
+
+client
+------
+
+Installs postgresql client packages and development headers during the
+compile phase. Also installs the `pg` Ruby gem during the compile
+phase so it can be made available for the `database` cookbook's
+resources, providers and libraries.
+
+ruby
+----
+
+**NOTE** This recipe may not currently work when installing Chef with
+  the
+  ["Omnibus" full stack installer](http://opscode.com/chef/install) on
+  some platforms due to an incompatibility with OpenSSL. See
+  [COOK-1406](http://tickets.opscode.com/browse/COOK-1406)
+
+Install the `pg` gem under Chef's Ruby environment so it can be used
+in other recipes.
+
+server
+------
+
+Includes the `server_debian` or `server_redhat` recipe to get the
+appropriate server packages installed and service managed. Also
+manages the configuration for the server:
+
+* generates a strong default password (via `openssl`) for `postgres`
+* sets the password for postgres
+* manages the `pg_hba.conf` file.
+
+server\_debian
+--------------
+
+Installs the postgresql server packages, manages the postgresql
+service and the postgresql.conf file.
+
+server\_redhat
+--------------
+
+Manages the postgres user and group (with UID/GID 26, per RHEL package
+conventions), installs the postgresql server packages, initializes the
+database and manages the postgresql service, and manages the
+postgresql.conf file.
+
+Resources/Providers
+===================
+
+See the [database](http://community.opscode.com/cookbooks/database)
+for resources and providers that can be used for managing PostgreSQL
+users and databases.
+
+Usage
+=====
+
+On systems that need to connect to a PostgreSQL database, add to a run
+list `recipe[postgresql]` or `recipe[postgresql::client]`.
+
+On systems that should be PostgreSQL servers, use
+`recipe[postgresql::server]` on a run list. This recipe does set a
+password and expect to use it. It performs a node.save when Chef is
+not running in `solo` mode. If you're using `chef-solo`, you'll need
+to set the attribute `node['postgresql']['password']['postgres']` in
+your node's `json_attribs` file or in a role.
+
+License and Author
+==================
+
+Author:: Joshua Timberman (<joshua@opscode.com>)
+Author:: Lamont Granquist (<lamont@opscode.com>)
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

data/lib/cookbooks/postgresql/attributes/default.rb

@@ -0,0 +1,103 @@
+#
+# Cookbook Name:: postgresql
+# Attributes:: postgresql
+#
+# Copyright 2008-2009, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+case platform
+when "debian"
+
+  case
+  when platform_version.to_f <= 5.0
+    default['postgresql']['version'] = "8.3"
+  when platform_version.to_f == 6.0
+    default['postgresql']['version'] = "8.4"
+  else
+    default['postgresql']['version'] = "9.1"
+  end
+
+  set['postgresql']['dir'] = "/etc/postgresql/#{node['postgresql']['version']}/main"
+  default['postgresql']['client']['packages'] = %w{postgresql-client libpq-dev}
+  default['postgresql']['server']['packages'] = %w{postgresql}
+
+when "ubuntu"
+
+  case
+  when platform_version.to_f <= 9.04
+    default['postgresql']['version'] = "8.3"
+  when platform_version.to_f <= 11.04
+    default['postgresql']['version'] = "8.4"
+  else
+    default['postgresql']['version'] = "9.1"
+  end
+
+  set['postgresql']['dir'] = "/etc/postgresql/#{node['postgresql']['version']}/main"
+  default['postgresql']['client']['packages'] = %w{postgresql-client libpq-dev}
+  default['postgresql']['server']['packages'] = %w{postgresql}
+
+when "fedora"
+
+  if platform_version.to_f <= 12
+    default['postgresql']['version'] = "8.3"
+  else
+    default['postgresql']['version'] = "8.4"
+  end
+
+  set['postgresql']['dir'] = "/var/lib/pgsql/data"
+  default['postgresql']['client']['packages'] = %w{postgresql-devel}
+  default['postgresql']['server']['packages'] = %w{postgresql-server}
+
+when "amazon"
+
+  default['postgresql']['version'] = "8.4"
+  set['postgresql']['dir'] = "/var/lib/pgsql/data"
+  default['postgresql']['client']['packages'] = %w{postgresql-devel}
+  default['postgresql']['server']['packages'] = %w{postgresql-server}
+
+when "redhat","centos","scientific"
+
+  default['postgresql']['version'] = "8.4"
+  set['postgresql']['dir'] = "/var/lib/pgsql/data"
+
+  if node['platform_version'].to_f >= 6.0
+    default['postgresql']['client']['packages'] = %w{postgresql-devel}
+    default['postgresql']['server']['packages'] = %w{postgresql-server}
+  else
+    default['postgresql']['client']['packages'] = ["postgresql#{node['postgresql']['version'].split('.').join}-devel"]
+    default['postgresql']['server']['packages'] = ["postgresql#{node['postgresql']['version'].split('.').join}-server"]
+  end
+
+when "suse"
+
+  case
+  when platform_version.to_f <= 11.1
+    default['postgresql']['version'] = "8.3"
+  else
+    default['postgresql']['version'] = "9.0"
+  end
+
+  set['postgresql']['dir'] = "/var/lib/pgsql/data"
+  default['postgresql']['client']['packages'] = %w{postgresql-client libpq-dev}
+  default['postgresql']['server']['packages'] = %w{postgresql-server}
+
+else
+  default['postgresql']['version'] = "8.4"
+  set['postgresql']['dir']         = "/etc/postgresql/#{node['postgresql']['version']}/main"
+  default['postgresql']['client']['packages'] = ["postgresql"]
+  default['postgresql']['server']['packages'] = ["postgresql"]
+end
+
+default['postgresql']['listen_addresses'] = "localhost"

data/lib/cookbooks/postgresql/metadata.rb

@@ -0,0 +1,21 @@
+maintainer        "Opscode, Inc."
+maintainer_email  "cookbooks@opscode.com"
+license           "Apache 2.0"
+description       "Installs and configures postgresql for clients or servers"
+long_description  IO.read(File.join(File.dirname(__FILE__), 'README.md'))
+version           "1.0.1"
+recipe            "postgresql", "Includes postgresql::client"
+recipe            "postgresql::client", "Installs postgresql client package(s)"
+recipe            "postgresql::server", "Installs postgresql server packages, templates"
+recipe            "postgresql::server_redhat", "Installs postgresql server packages, redhat family style"
+recipe            "postgresql::server_debian", "Installs postgresql server packages, debian family style"
+
+%w{ ubuntu debian fedora suse }.each do |os|
+  supports os
+end
+
+%w{redhat centos scientific}.each do |el|
+  supports el, ">= 6.0"
+end
+
+depends "openssl"

data/lib/cookbooks/postgresql/recipes/client.rb

@@ -0,0 +1,26 @@
+#
+# Cookbook Name:: postgresql
+# Recipe:: client
+#
+# Author:: Joshua Timberman (<joshua@opscode.com>)
+# Author:: Lamont Granquist (<lamont@opscode.com>)
+# Copyright 2009-2011 Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+node['postgresql']['client']['packages'].each do |pg_pack|
+  package pg_pack do
+    action :install
+  end
+end

data/lib/cookbooks/postgresql/recipes/default.rb

@@ -0,0 +1,20 @@
+#
+# Cookbook Name:: postgresql
+# Recipe:: default
+#
+# Copyright 2009, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+include_recipe "postgresql::client"

data/lib/cookbooks/postgresql/recipes/ruby.rb

@@ -0,0 +1,40 @@
+#
+# Cookbook Name:: postgresql
+# Recipe:: ruby
+#
+# Author:: Joshua Timberman (<joshua@opscode.com>)
+# Copyright 2012 Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+begin
+  require 'pg'
+rescue LoadError
+  execute "apt-get update" do
+    ignore_failure true
+    action :nothing
+  end.run_action(:run) if node['platform_family'] == "debian"
+
+  node.set['build_essential']['compiletime'] = true
+  include_recipe "build-essential"
+  include_recipe "postgresql::client"
+
+  node['postgresql']['client']['packages'].each do |pg_pack|
+
+    resources("package[#{pg_pack}]").run_action(:install)
+
+  end
+
+  chef_gem "pg"
+end

data/lib/cookbooks/postgresql/recipes/server.rb

@@ -0,0 +1,64 @@
+#/postgresql.conf.
+# Cookbook Name:: postgresql
+# Recipe:: server
+#
+# Author:: Joshua Timberman (<joshua@opscode.com>)
+# Author:: Lamont Granquist (<lamont@opscode.com>)
+# Copyright 2009-2011, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+::Chef::Recipe.send(:include, Opscode::OpenSSL::Password)
+
+include_recipe "postgresql::client"
+
+# randomly generate postgres password
+node.set_unless['postgresql']['password']['postgres'] = secure_password
+node.save unless Chef::Config[:solo]
+
+if node['postgresql']['version'].to_f <= 8.3
+  node.default['postgresql']['ssl'] = "off"
+else
+  node.default['postgresql']['ssl'] = "true"
+end
+
+# Include the right "family" recipe for installing the server
+# since they do things slightly differently.
+case node['platform']
+when "redhat", "centos", "fedora", "suse", "scientific", "amazon"
+  include_recipe "postgresql::server_redhat"
+when "debian", "ubuntu"
+  include_recipe "postgresql::server_debian"
+end
+
+template "#{node['postgresql']['dir']}/pg_hba.conf" do
+  source "pg_hba.conf.erb"
+  owner "postgres"
+  group "postgres"
+  mode 00600
+  notifies :reload, resources(:service => "postgresql"), :immediately
+end
+
+# Default PostgreSQL install has 'ident' checking on unix user 'postgres'
+# and 'md5' password checking with connections from 'localhost'. This script
+# runs as user 'postgres', so we can execute the 'role' and 'database' resources
+# as 'root' later on, passing the below credentials in the PG client.
+bash "assign-postgres-password" do
+  user 'postgres'
+  code <<-EOH
+echo "ALTER ROLE postgres ENCRYPTED PASSWORD '#{node['postgresql']['password']['postgres']}';" | psql
+  EOH
+  not_if "echo '\connect' | PGPASSWORD=#{node['postgresql']['password']['postgres']} psql --username=postgres --no-password -h localhost"
+  action :run
+end

data/lib/cookbooks/postgresql/recipes/server_debian.rb

@@ -0,0 +1,64 @@
+#
+# Cookbook Name:: postgresql
+# Recipe:: server
+#
+# Author:: Joshua Timberman (<joshua@opscode.com>)
+# Author:: Lamont Granquist (<lamont@opscode.com>)#
+# Copyright 2009-2011, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+include_recipe "postgresql::client"
+
+
+if node['postgresql']['version'].to_f <= 8.3
+  node.default['postgresql']['ssl'] = "off"
+else
+  node.default['postgresql']['ssl'] = "true"
+end
+
+node['postgresql']['server']['packages'].each do |pg_pack|
+  package pg_pack do
+    action :install
+  end
+end
+
+service "postgresql" do
+  case node['platform']
+  when "ubuntu"
+    case
+    when node['platform_version'].to_f <= 10.04
+      service_name "postgresql-#{node['postgresql']['version']}"
+    else
+      service_name "postgresql"
+    end
+  when "debian"
+    case
+    when node['platform_version'].to_f <= 5.0
+      service_name "postgresql-#{node['postgresql']['version']}"
+    else
+      service_name "postgresql"
+    end
+  end
+  supports :restart => true, :status => true, :reload => true
+  action [:enable, :start]
+end
+
+template "#{node['postgresql']['dir']}/postgresql.conf" do
+  source "debian.postgresql.conf.erb"
+  owner "postgres"
+  group "postgres"
+  mode 0600
+  notifies :restart, resources(:service => "postgresql"), :immediately
+end

data/lib/cookbooks/postgresql/recipes/server_redhat.rb

@@ -0,0 +1,77 @@
+#
+# Cookbook Name:: postgresql
+# Recipe:: server
+#
+# Author:: Joshua Timberman (<joshua@opscode.com>)
+# Author:: Lamont Granquist (<lamont@opscode.com>)
+# Copyright 2009-2011, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+include_recipe "postgresql::client"
+
+# Create a group and user like the package will.
+# Otherwise the templates fail.
+
+group "postgres" do
+  gid 26
+end
+
+user "postgres" do
+  shell "/bin/bash"
+  comment "PostgreSQL Server"
+  home "/var/lib/pgsql"
+  gid "postgres"
+  system true
+  uid 26
+  supports :manage_home => false
+end
+
+node['postgresql']['server']['packages'].each do |pg_pack|
+  package pg_pack do
+    action :install
+  end
+end
+
+case node['platform']
+when "redhat","centos","scientific"
+  case
+  when node['platform_version'].to_f >= 6.0
+    package "postgresql-server"
+  else
+    package "postgresql#{node['postgresql']['version'].split('.').join}-server"
+  end
+when "fedora","suse"
+  package "postgresql-server"
+end
+
+# Following not valid for 9.x version of postgresql
+if node['postgresql']['version'].to_f < 9.0
+  execute "/sbin/service postgresql initdb" do
+    not_if { ::FileTest.exist?(File.join(node['postgresql']['dir'], "PG_VERSION")) }
+  end
+end
+
+service "postgresql" do
+  supports :restart => true, :status => true, :reload => true
+  action [:enable, :start]
+end
+
+template "#{node['postgresql']['dir']}/postgresql.conf" do
+  source "redhat.postgresql.conf.erb"
+  owner "postgres"
+  group "postgres"
+  mode 0600
+  notifies :restart, resources(:service => "postgresql"), :immediately
+end