server_maint 0.0.3 → 0.0.4

data/lib/cookbooks/mysql/files/default/tests/minitest/support/helpers.rb

@@ -0,0 +1,11 @@
+module Helpers
+  module Mysql
+    include MiniTest::Chef::Assertions
+    include MiniTest::Chef::Context
+    include MiniTest::Chef::Resources
+
+    def assert_secure_password(type)
+      node["mysql"]["server_#{type}_password"].length.must_be_close_to(20, 8)
+    end
+  end
+end

data/lib/cookbooks/mysql/libraries/helpers.rb

@@ -0,0 +1,33 @@
+#
+# Author:: Seth Chisamore (<schisamo@opscode.com>)
+# Copyright:: Copyright (c) 2011 Opscode, Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+# 
+#     http://www.apache.org/licenses/LICENSE-2.0
+# 
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+module Opscode
+  module Mysql
+    module Helpers
+
+      def debian_before_squeeze?
+        platform?("debian") && (node.platform_version.to_f < 6.0)
+      end
+
+      def ubuntu_before_lucid?
+        platform?("ubuntu") && (node.platform_version.to_f < 10.0)
+      end
+
+    end
+  end
+end

data/lib/cookbooks/mysql/metadata.rb

@@ -0,0 +1,140 @@
+name		  "mysql"
+maintainer        "Opscode, Inc."
+maintainer_email  "cookbooks@opscode.com"
+license           "Apache 2.0"
+description       "Installs and configures mysql for client or server"
+long_description  IO.read(File.join(File.dirname(__FILE__), 'README.md'))
+version           "1.3.0"
+recipe            "mysql", "Includes the client recipe to configure a client"
+recipe            "mysql::client", "Installs packages required for mysql clients using run_action magic"
+recipe            "mysql::server", "Installs packages required for mysql servers w/o manual intervention"
+recipe            "mysql::server_ec2", "Performs EC2-specific mountpoint manipulation"
+
+%w{ debian ubuntu centos suse fedora redhat scientific amazon freebsd windows mac_os_x }.each do |os|
+  supports os
+end
+
+depends "openssl"
+depends "build-essential"
+suggests "homebrew"
+suggests "windows"
+
+attribute "mysql/server_root_password",
+  :display_name => "MySQL Server Root Password",
+  :description => "Randomly generated password for the mysqld root user",
+  :default => "randomly generated"
+
+attribute "mysql/bind_address",
+  :display_name => "MySQL Bind Address",
+  :description => "Address that mysqld should listen on",
+  :default => "ipaddress"
+
+attribute "mysql/data_dir",
+  :display_name => "MySQL Data Directory",
+  :description => "Location of mysql databases",
+  :default => "/var/lib/mysql"
+
+attribute "mysql/conf_dir",
+  :display_name => "MySQL Conf Directory",
+  :description => "Location of mysql conf files",
+  :default => "/etc/mysql"
+
+attribute "mysql/ec2_path",
+  :display_name => "MySQL EC2 Path",
+  :description => "Location of mysql directory on EC2 instance EBS volumes",
+  :default => "/mnt/mysql"
+
+attribute "mysql/reload_action",
+  :display_name => "MySQL conf file reload action",
+  :description => "Action to take when mysql conf files are modified",
+  :default => "reload"
+
+attribute "mysql/tunable",
+  :display_name => "MySQL Tunables",
+  :description => "Hash of MySQL tunable attributes",
+  :type => "hash"
+
+attribute "mysql/tunable/key_buffer",
+  :display_name => "MySQL Tuntable Key Buffer",
+  :default => "250M"
+
+attribute "mysql/tunable/max_connections",
+  :display_name => "MySQL Tunable Max Connections",
+  :default => "800"
+
+attribute "mysql/tunable/wait_timeout",
+  :display_name => "MySQL Tunable Wait Timeout",
+  :default => "180"
+
+attribute "mysql/tunable/net_read_timeout",
+  :display_name => "MySQL Tunable Net Read Timeout",
+  :default => "30"
+
+attribute "mysql/tunable/net_write_timeout",
+  :display_name => "MySQL Tunable Net Write Timeout",
+  :default => "30"
+
+attribute "mysql/tunable/back_log",
+  :display_name => "MySQL Tunable Back Log",
+  :default => "128"
+
+attribute "mysql/tunable/table_cache",
+  :display_name => "MySQL Tunable Table Cache for MySQL < 5.1.3",
+  :default => "128"
+
+attribute "mysql/tunable/table_open_cache",
+  :display_name => "MySQL Tunable Table Cache for MySQL >= 5.1.3",
+  :default => "128"
+
+attribute "mysql/tunable/max_heap_table_size",
+  :display_name => "MySQL Tunable Max Heap Table Size",
+  :default => "32M"
+
+attribute "mysql/tunable/expire_logs_days",
+  :display_name => "MySQL Exipre Log Days",
+  :default => "10"
+
+attribute "mysql/tunable/max_binlog_size",
+  :display_name => "MySQL Max Binlog Size",
+  :default => "100M"
+
+attribute "mysql/client",
+  :display_name => "MySQL Connector/C Client",
+  :description => "Hash of MySQL client attributes",
+  :type => "hash"
+
+attribute "mysql/client/version",
+  :display_name => "MySQL Connector/C Version",
+  :default => "6.0.2"
+
+attribute "mysql/client/arch",
+  :display_name => "MySQL Connector/C Architecture",
+  :default => "win32"
+
+attribute "mysql/client/package_file",
+  :display_name => "MySQL Connector/C Package File Name",
+  :default => "mysql-connector-c-6.0.2-win32.msi"
+
+attribute "mysql/client/url",
+  :display_name => "MySQL Connector/C Download URL",
+  :default => "http://www.mysql.com/get/Downloads/Connector-C/mysql-connector-c-6.0.2-win32.msi/from/http://mysql.mirrors.pair.com/"
+
+attribute "mysql/client/package_name",
+  :display_name => "MySQL Connector/C Registry DisplayName",
+  :default => "MySQL Connector C 6.0.2"
+
+attribute "mysql/client/basedir",
+  :display_name => "MySQL Connector/C Base Install Directory",
+  :default => "C:\\Program Files (x86)\\MySQL\\Connector C 6.0.2"
+
+attribute "mysql/client/lib_dir",
+  :display_name => "MySQL Connector/C Library Directory (containing libmysql.dll)",
+  :default => "C:\\Program Files (x86)\\MySQL\\Connector C 6.0.2\\lib\\opt"
+
+attribute "mysql/client/bin_dir",
+  :display_name => "MySQL Connector/C Executable Directory",
+  :default => "C:\\Program Files (x86)\\MySQL\\Connector C 6.0.2\\bin"
+
+attribute "mysql/client/ruby_dir",
+  :display_name => "Ruby Executable Directory which should gain MySQL support",
+  :default => "system ruby"

data/lib/cookbooks/mysql/recipes/client.rb

@@ -0,0 +1,59 @@
+#
+# Cookbook Name:: mysql
+# Recipe:: client
+#
+# Copyright 2008-2011, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+# Include Opscode helper in Recipe class to get access
+# to debian_before_squeeze? and ubuntu_before_lucid?
+::Chef::Recipe.send(:include, Opscode::Mysql::Helpers)
+
+case node['platform']
+when "windows"
+  package_file = node['mysql']['client']['package_file']
+  remote_file "#{Chef::Config[:file_cache_path]}/#{package_file}" do
+    source node['mysql']['client']['url']
+    not_if { File.exists? "#{Chef::Config[:file_cache_path]}/#{package_file}" }
+  end
+
+  windows_package node['mysql']['client']['packages'].first do
+    source "#{Chef::Config[:file_cache_path]}/#{package_file}"
+  end
+  windows_path node['mysql']['client']['bin_dir'] do
+    action :add
+  end
+  def package(*args, &blk)
+    windows_package(*args, &blk)
+  end
+when "mac_os_x"
+  include_recipe 'homebrew'
+end
+
+node['mysql']['client']['packages'].each do |mysql_pack|
+  package mysql_pack do
+    action :install
+  end
+end
+
+if platform? 'windows'
+  ruby_block "copy libmysql.dll into ruby path" do
+    block do
+      require 'fileutils'
+      FileUtils.cp "#{node['mysql']['client']['lib_dir']}\\libmysql.dll", node['mysql']['client']['ruby_dir']
+    end
+    not_if { File.exist?("#{node['mysql']['client']['ruby_dir']}\\libmysql.dll") }
+  end
+end

data/lib/cookbooks/mysql/recipes/default.rb

@@ -0,0 +1,20 @@
+#
+# Cookbook Name:: mysql
+# Recipe:: default
+#
+# Copyright 2008-2009, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+include_recipe "mysql::client"

data/lib/cookbooks/mysql/recipes/ruby.rb

@@ -0,0 +1,36 @@
+#
+# Cookbook Name:: mysql
+# Recipe:: ruby
+#
+# Author:: Jesse Howarth (<him@jessehowarth.com>)
+# Author:: Jamie Winsor (<jamie@vialstudios.com>)
+#
+# Copyright 2008-2012, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+execute "apt-get update" do
+  ignore_failure true
+  action :nothing
+end.run_action(:run) if node['platform_family'] == "debian"
+
+node.set['build_essential']['compiletime'] = true
+include_recipe "build-essential"
+include_recipe "mysql::client"
+
+node['mysql']['client']['packages'].each do |mysql_pack|
+  resources("package[#{mysql_pack}]").run_action(:install)
+end
+
+chef_gem "mysql"

data/lib/cookbooks/mysql/recipes/server.rb

@@ -0,0 +1,216 @@
+#
+# Cookbook Name:: mysql
+# Recipe:: default
+#
+# Copyright 2008-2011, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+::Chef::Recipe.send(:include, Opscode::OpenSSL::Password)
+
+include_recipe "mysql::client"
+
+if Chef::Config[:solo]
+  missing_attrs = %w{
+    server_debian_password server_root_password server_repl_password
+  }.select do |attr|
+    node["mysql"][attr].nil?
+  end.map { |attr| "node['mysql']['#{attr}']" }
+
+  if !missing_attrs.empty?
+    Chef::Application.fatal!([
+      "You must set #{missing_attrs.join(', ')} in chef-solo mode.",
+      "For more information, see https://github.com/opscode-cookbooks/mysql#chef-solo-note"
+    ].join(' '))
+  end
+else
+  # generate all passwords
+  node.set_unless['mysql']['server_debian_password'] = secure_password
+  node.set_unless['mysql']['server_root_password']   = secure_password
+  node.set_unless['mysql']['server_repl_password']   = secure_password
+end
+
+if platform?(%w{debian ubuntu})
+
+  directory "/var/cache/local/preseeding" do
+    owner "root"
+    group node['mysql']['root_group']
+    mode 0755
+    recursive true
+  end
+
+  execute "preseed mysql-server" do
+    command "debconf-set-selections /var/cache/local/preseeding/mysql-server.seed"
+    action :nothing
+  end
+
+  template "/var/cache/local/preseeding/mysql-server.seed" do
+    source "mysql-server.seed.erb"
+    owner "root"
+    group node['mysql']['root_group']
+    mode "0600"
+    notifies :run, resources(:execute => "preseed mysql-server"), :immediately
+  end
+
+  template "#{node['mysql']['conf_dir']}/debian.cnf" do
+    source "debian.cnf.erb"
+    owner "root"
+    group node['mysql']['root_group']
+    mode "0600"
+  end
+
+end
+
+if platform? 'windows'
+  package_file = node['mysql']['package_file']
+
+  remote_file "#{Chef::Config[:file_cache_path]}/#{package_file}" do
+    source node['mysql']['url']
+    not_if { File.exists? "#{Chef::Config[:file_cache_path]}/#{package_file}" }
+  end
+
+  windows_package node['mysql']['server']['packages'].first do
+    source "#{Chef::Config[:file_cache_path]}/#{package_file}"
+  end
+
+  def package(*args, &blk)
+    windows_package(*args, &blk)
+  end
+end
+
+node['mysql']['server']['packages'].each do |package_name|
+  package package_name do
+    action :install
+  end
+end
+
+unless platform?(%w{mac_os_x})
+
+  directory node['mysql']['confd_dir'] do
+    owner "mysql" unless platform? 'windows'
+    group "mysql" unless platform? 'windows'
+    action :create
+    recursive true
+  end
+
+  if platform? 'windows'
+    require 'win32/service'
+
+    windows_path node['mysql']['bin_dir'] do
+      action :add
+    end
+
+    windows_batch "install mysql service" do
+      command "\"#{node['mysql']['bin_dir']}\\mysqld.exe\" --install #{node['mysql']['service_name']}"
+      not_if { Win32::Service.exists?(node['mysql']['service_name']) }
+    end
+  end
+
+  service "mysql" do
+    service_name node['mysql']['service_name']
+    if node['mysql']['use_upstart']
+      restart_command "restart mysql"
+      stop_command "stop mysql"
+      start_command "start mysql"
+    end
+    supports :status => true, :restart => true, :reload => true
+    action :enable
+  end
+
+  skip_federated = case node['platform']
+                   when 'fedora', 'ubuntu', 'amazon'
+                     true
+                   when 'centos', 'redhat', 'scientific'
+                     node['platform_version'].to_f < 6.0
+                   else
+                     false
+                   end
+
+  template "#{node['mysql']['conf_dir']}/my.cnf" do
+    source "my.cnf.erb"
+    owner "root" unless platform? 'windows'
+    group node['mysql']['root_group'] unless platform? 'windows'
+    mode "0644"
+    case node['mysql']['reload_action']
+    when 'restart'
+      notifies :restart, resources(:service => "mysql"), :immediately
+    when 'reload'
+      notifies :reload, resources(:service => "mysql"), :immediately
+    else
+      Chef::Log.info "my.cnf updated but mysql.reload_action is #{node['mysql']['reload_action']}. No action taken."
+    end
+    variables :skip_federated => skip_federated
+  end
+end
+
+unless Chef::Config[:solo]
+  ruby_block "save node data" do
+    block do
+      node.save
+    end
+    action :create
+  end
+end
+
+# set the root password for situations that don't support pre-seeding.
+# (eg. platforms other than debian/ubuntu & drop-in mysql replacements)
+execute "assign-root-password" do
+  command "\"#{node['mysql']['mysqladmin_bin']}\" -u root password \"#{node['mysql']['server_root_password']}\""
+  action :run
+  only_if "\"#{node['mysql']['mysql_bin']}\" -u root -e 'show databases;'"
+end
+
+# Homebrew has its own way to do databases
+if platform?(%w{mac_os_x})
+
+  execute "mysql-install-db" do
+    command "mysql_install_db --verbose --user=`whoami` --basedir=\"$(brew --prefix mysql)\" --datadir=#{node['mysql']['data_dir']} --tmpdir=/tmp"
+    environment('TMPDIR' => nil)
+    action :run
+    creates "#{node['mysql']['data_dir']}/mysql"
+  end
+
+else
+  grants_path = node['mysql']['grants_path']
+  begin
+    t = resources("template[#{grants_path}]")
+  rescue
+    Chef::Log.info("Could not find previously defined grants.sql resource")
+    t = template grants_path do
+      source "grants.sql.erb"
+      owner "root" unless platform? 'windows'
+      group node['mysql']['root_group'] unless platform? 'windows'
+      mode "0600"
+      action :create
+    end
+  end
+
+  if platform? 'windows'
+    windows_batch "mysql-install-privileges" do
+      command "\"#{node['mysql']['mysql_bin']}\" -u root #{node['mysql']['server_root_password'].empty? ? '' : '-p' }\"#{node['mysql']['server_root_password']}\" < \"#{grants_path}\""
+      action :nothing
+      subscribes :run, resources("template[#{grants_path}]"), :immediately
+    end
+  else
+    execute "mysql-install-privileges" do
+      command "\"#{node['mysql']['mysql_bin']}\" -u root #{node['mysql']['server_root_password'].empty? ? '' : '-p' }\"#{node['mysql']['server_root_password']}\" < \"#{grants_path}\""
+      action :nothing
+      subscribes :run, resources("template[#{grants_path}]"), :immediately
+    end
+  end
+
+  service "mysql" do
+    action :start
+  end
+end

data/lib/cookbooks/mysql/recipes/server_ec2.rb

@@ -0,0 +1,51 @@
+#
+# Cookbook Name:: mysql
+# Recipe:: default
+#
+# Copyright 2008-2009, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+
+if (node.attribute?('ec2') && ! FileTest.directory?(node['mysql']['ec2_path']))
+
+  service "mysql" do
+    action :stop
+  end
+
+  execute "install-mysql" do
+    command "mv #{node['mysql']['data_dir']} #{node['mysql']['ec2_path']}"
+    not_if do FileTest.directory?(node['mysql']['ec2_path']) end
+  end
+
+  [node['mysql']['ec2_path'], node['mysql']['data_dir']].each do |dir|
+    directory dir do
+      owner "mysql"
+      group "mysql"
+    end
+  end
+
+  mount node['mysql']['data_dir'] do
+    device node['mysql']['ec2_path']
+    fstype "none"
+    options "bind,rw"
+    action [:mount, :enable]
+  end
+
+  service "mysql" do
+    action :start
+  end
+
+end
+

data/lib/cookbooks/mysql/templates/default/debian.cnf.erb

@@ -0,0 +1,12 @@
+[client]
+host     = localhost
+user     = debian-sys-maint
+password = <%= node['mysql']['server_debian_password'] %>
+socket   = <%= node['mysql']['socket'] %>
+
+[mysql_upgrade]
+host     = localhost
+user     = debian-sys-maint
+password = <%= node['mysql']['server_debian_password'] %>
+socket   = <%= node['mysql']['socket'] %>
+basedir  = /usr

data/lib/cookbooks/mysql/templates/default/grants.sql.erb

@@ -0,0 +1,15 @@
+# Generated by Chef for <%= node['hostname'] %>.
+# Local modifications will be overwritten.
+
+<% case node['platform'] -%>
+<% when "debian","ubuntu" -%>
+GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, RELOAD, SHUTDOWN, PROCESS, FILE, REFERENCES, INDEX, ALTER, SHOW DATABASES, SUPER, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, REPLICATION SLAVE, REPLICATION CLIENT ON *.* TO 'debian-sys-maint'@'localhost' IDENTIFIED BY '<%= node[:mysql][:server_debian_password] %>' WITH GRANT OPTION;
+<% end -%>
+# Grant replication for a slave user.
+GRANT REPLICATION SLAVE ON *.* TO 'repl'@'%' identified by '<%= node['mysql']['server_repl_password'] %>';
+
+# Set the server root password. This should be preseeded by the package installation.
+<% if node['mysql']['allow_remote_root'] -%>
+GRANT ALL ON *.* TO 'root'@'%' IDENTIFIED BY '<%= node['mysql']['server_root_password'] %>' WITH GRANT OPTION;
+<% end -%>
+SET PASSWORD FOR 'root'@'localhost' = PASSWORD('<%= node['mysql']['server_root_password'] %>');