simp-cli 1.0.12

data/lib/simp/cli/config/item/ldap_uri.rb

@@ -0,0 +1,43 @@
+require "resolv"
+require 'highline/import'
+require File.expand_path( '../item', File.dirname(__FILE__) )
+require File.expand_path( '../utils', File.dirname(__FILE__) )
+
+module Simp; end
+class Simp::Cli; end
+module Simp::Cli::Config
+  # FIXME: what is this for?
+  class Item::LdapUri < ListItem
+    def initialize
+      super
+      @key         = 'ldap::uri'
+      @description = %Q{List of OpenLDAP servers in URI form (ldap://server)}
+    end
+
+
+    def os_value
+      values = `grep URI /etc/openldap/ldap.conf`.split("\n").map do |line|
+        line =~ /^\s*URI\s+(.+)\s*/
+        $1
+      end.compact
+      values
+    end
+
+
+    def recommended_value
+      if item = @config_items.fetch( 'hostname', nil )
+        [ "ldap://#{item.value}" ]
+      end
+    end
+
+
+    def validate_item item
+      ( item =~ %r{^ldap://.+} ) ? true : false &&
+      (
+        Simp::Cli::Config::Utils.validate_hostname( item ) ||
+        Simp::Cli::Config::Utils.validate_fqdn( item )     ||
+        Simp::Cli::Config::Utils.validate_ip( item )
+      )
+    end
+  end
+end

data/lib/simp/cli/config/item/log_servers.rb

@@ -0,0 +1,27 @@
+require "resolv"
+require 'highline/import'
+require File.expand_path( '../item',  File.dirname(__FILE__) )
+require File.expand_path( '../utils', File.dirname(__FILE__) )
+
+module Simp; end
+class Simp::Cli; end
+module Simp::Cli::Config
+  class Item::LogServers < ListItem
+    def initialize
+      super
+      @key         = 'log_servers'
+      @description = %Q{Your log server(s). Only use hostnames here if at all possible.}
+      @allow_empty_list = true
+    end
+
+    def os_value
+      nil
+    end
+
+    def validate_item item
+      ( Simp::Cli::Config::Utils.validate_hostname( item ) ||
+        Simp::Cli::Config::Utils.validate_fqdn( item ) ||
+        Simp::Cli::Config::Utils.validate_ip( item ) )
+    end
+  end
+end

data/lib/simp/cli/config/item/netmask.rb

@@ -0,0 +1,39 @@
+require 'highline/import'
+require File.expand_path( '../item', File.dirname(__FILE__) )
+require File.expand_path( '../utils', File.dirname(__FILE__) )
+
+module Simp; end
+class Simp::Cli; end
+module Simp::Cli::Config
+  class Item::Netmask < Item
+    def initialize
+      super
+      @key         = 'netmask'
+      @description = %q{The netmask of the system.}
+      @__warning   = false
+    end
+
+    def validate( x )
+      Simp::Cli::Config::Utils.validate_netmask x
+    end
+
+    # TODO: comment upon the hell-logic below
+    # TODO: possibly refactor ip and netmask os_value into shared parent
+    def os_value
+      netmask = nil
+      nic = @config_items.fetch('network::interface').value
+      if nic || @fact
+        @fact = @fact || "netmask_#{nic}"
+        netmask = super
+        if netmask.nil? and !@__warning
+          warning = "WARNING: #{@key}: No Netmask found for NIC #{nic}"
+          say "<%= color(%q{#{warning}}, YELLOW) %>\n"
+          @__warning = true
+        end
+      end
+      netmask
+    end
+
+    def recommended_value; os_value; end
+  end
+end

data/lib/simp/cli/config/item/network_conf.rb

@@ -0,0 +1,63 @@
+require 'highline/import'
+require File.expand_path( '../item', File.dirname(__FILE__) )
+require File.expand_path( '../utils', File.dirname(__FILE__) )
+
+module Simp; end
+class Simp::Cli; end
+module Simp::Cli::Config
+  class Item::NetworkConf < ActionItem
+    def initialize
+      super
+      @key               = 'network::conf'
+      @description       = 'action item; configures network interfaces'
+      @die_on_apply_fail = true
+    end
+
+    def apply
+      ci  = {}
+      cmd = nil
+
+      dhcp      = @config_items.fetch( 'dhcp'        ).value
+      # BOOTPROTO=none is valid to spec; BOOTPROTO=static isn't
+      bootproto = (dhcp == 'static') ? 'none' : dhcp
+      interface = @config_items.fetch( 'network::interface'   ).value
+
+      # apply the interface useing the SIMP classes
+      # NOTE: the "FACTER_ipaddress=XXX" helps puppet avoid a fatal error that
+      #       occurs in the core ipaddress fact on offline systems.
+      cmd = %Q@FACTER_ipaddress=XXX puppet apply -e "network::add_eth{'#{interface}': bootproto => '#{bootproto}', onboot => 'yes'@
+
+      if bootproto == 'none'
+        ipaddress   = @config_items.fetch( 'ipaddress'   ).value
+        hostname    = @config_items.fetch( 'hostname'    ).value
+        netmask     = @config_items.fetch( 'netmask'     ).value
+        gateway     = @config_items.fetch( 'gateway'     ).value
+        dns_search  = @config_items.fetch( 'dns::search' ).value
+        dns_servers = @config_items.fetch( 'dns::servers').value
+
+        resolv_domain = hostname.split('.')[1..-1].join('.')
+        cmd += %Q{, }
+        cmd += %Q@ipaddr => '#{ipaddress}', @
+        cmd += %Q@netmask => '#{netmask}', @
+        cmd += %Q@gateway => '#{gateway}' } @
+        cmd += %Q@class{ 'common::resolv': @
+        cmd += %Q@resolv_domain => '#{resolv_domain}', @
+        cmd += %Q@nameservers => #{ format_puppet_array( dns_servers ) }, @
+        cmd += %Q@search => #{ format_puppet_array( dns_search ) }, @
+        cmd += %Q@named_autoconf => false, @
+      end
+      cmd += %Q@}"@
+# TODO: maybe good ideas
+#   - set $::domain with FACTER_domain=
+#   - set comon::resolv{ named_autofonf => false
+
+      puts cmd unless @silent
+      %x{#{cmd}}
+    end
+
+   def format_puppet_array v
+     v = [v] if v.kind_of? String
+     "['#{v.join "','"}']"
+   end
+  end
+end

data/lib/simp/cli/config/item/network_dhcp.rb

@@ -0,0 +1,27 @@
+require 'highline/import'
+require File.expand_path( '../item', File.dirname(__FILE__) )
+require File.expand_path( '../utils', File.dirname(__FILE__) )
+
+module Simp; end
+class Simp::Cli; end
+module Simp::Cli::Config
+  class Item::DHCP < Item
+    def initialize
+      super
+      @key         = 'dhcp'
+      @description = %q{Whether or not to use DHCP to set up your network ("static" or "dhcp")}
+    end
+
+    def recommended_value
+      'static' # a puppet master is always recommended to be static.
+    end
+
+    def validate( x )
+      return ['dhcp', 'static' ].include?( x.to_s.downcase )
+    end
+
+    def not_valid_message
+      'Valid answers are "static" or "dhcp"'
+    end
+  end
+end

data/lib/simp/cli/config/item/network_interface.rb

@@ -0,0 +1,41 @@
+require 'highline/import'
+require File.expand_path( '../item', File.dirname(__FILE__) )
+require File.expand_path( '../utils', File.dirname(__FILE__) )
+
+module Simp; end
+class Simp::Cli; end
+module Simp::Cli::Config
+
+  class Item::NetworkInterface < Item
+    def initialize
+      super
+      @key         = 'network::interface'
+      @description = 'The network interface to use to connect to the network.'
+    end
+
+    # try to guess which NIC is likely to be used
+    # TODO IDEA: also use Facter to prefer NICs that already have IPs
+    def recommended_value
+      devices = acceptable_values
+      (
+       devices.select{|x|  x.match(/^br/)}.first  ||
+       devices.select{|x|  x.match(/^eth/)}.first ||
+       devices.select{|x| x.match(/^em/)}.first   ||
+       devices.first
+      )
+    end
+
+    def validate( x )
+      acceptable_values.include?( x )
+    end
+
+    def not_valid_message
+      "Acceptable values: \n" + acceptable_values.map{ |x| "  #{x}" }.join("\n")
+    end
+
+    # helper method; provides a list of available NICs
+    def acceptable_values
+      Facter.value('interfaces').split(',').delete_if{|x| x == 'lo'}.sort
+    end
+  end
+end

data/lib/simp/cli/config/item/network_setup_nic.rb

@@ -0,0 +1,28 @@
+require 'highline/import'
+require File.expand_path( '../item', File.dirname(__FILE__) )
+require File.expand_path( '../utils', File.dirname(__FILE__) )
+
+module Simp; end
+class Simp::Cli; end
+module Simp::Cli::Config
+  class Item::SetupNIC < YesNoItem
+    def initialize
+      super
+      @key         = 'network::setup_nic'
+      @description = %Q{Do you want to activate this NIC now?}
+    end
+
+    def recommended_value
+      os_value || 'yes'
+    end
+
+    def query_ask
+      # TODO: check, then
+      # The NIC does not currently have an IP, Netmask, or Gateway
+      nic = @config_items.fetch('network::interface').value
+#      @description.gsub( 'this NIC'
+      super
+    end
+
+  end
+end

data/lib/simp/cli/config/item/ntp_servers.rb

@@ -0,0 +1,69 @@
+require "resolv"
+require 'highline/import'
+require File.expand_path( '../item', File.dirname(__FILE__) )
+require File.expand_path( '../utils', File.dirname(__FILE__) )
+
+module Simp; end
+class Simp::Cli; end
+module Simp::Cli::Config
+  class Item::NTPServers < ListItem
+    def initialize
+      super
+      @key              = 'ntpd::servers'
+      @warnings         = {
+        :no_ntp            => "A consistent time source is critical to your systems' security.",
+        :warning_hw_clocks => "DO NOT run multiple production systems using individual hardware clocks!",
+      }
+      @description      =  "Your network's NTP time servers.\n\n#{@warnings.values.join("\n")}"
+      @allow_empty_list = true
+    end
+
+    def description
+      extra = ''
+      if @config_items.key? 'gateway'
+        gateway  = @config_items.fetch('gateway').value
+        extra = "\nFor many networks, the default gateway (#{gateway}) provides an NTP server."
+      end
+      "#{@description}#{extra}"
+    end
+
+    def os_value( file='/etc/ntp/ntpservers' )
+      # TODO: make this a custom fact?
+      # TODO: is /etc/ntp/ntpservers being used in recent versions of SIMP?
+      servers = []
+      if File.readable? file
+        File.readlines( file ).map do |line|
+          line.strip!
+          if line !~ /^#/
+            servers << line
+          else
+            nil
+          end
+        end.compact
+      end
+      servers
+    end
+
+    def recommended_value
+      if (!os_value.empty?) && (os_value.first !~ /^127\./)
+        os_value
+      else
+        nil
+      end
+    end
+
+    # allow empty NTP servers, but reiterate warning because it's important.
+    def validate list
+      if !@silent && (list.is_a?(Array) || list.is_a?(String)) && list.empty?
+        say_red( "IMPORTANT: #{@warnings.fetch(:no_ntp)}" )
+        sleep 3  # TODO: should there be a standard timeout for Item delays?
+      end
+      super
+    end
+
+    def validate_item item
+      ( Simp::Cli::Config::Utils.validate_ip( item ) ||
+        Simp::Cli::Config::Utils.validate_fqdn( item ) )
+    end
+  end
+end

data/lib/simp/cli/config/item/puppet_autosign.rb

@@ -0,0 +1,66 @@
+require 'highline/import'
+require File.expand_path( '../item', File.dirname(__FILE__) )
+require File.expand_path( '../utils', File.dirname(__FILE__) )
+module Simp; end
+class Simp::Cli; end
+module Simp::Cli::Config
+  class Item::PuppetAutosign < ActionItem
+    attr_accessor :file
+    def initialize
+      super
+      @key         = 'puppet::autosign'
+      @description = %Q{By default, the only host eligible for autosign is the puppet master.}
+      @file        = '/etc/puppet/autosign.conf'
+    end
+
+    def os_value
+      # TODO: make this a custom fact?
+      values = Array.new
+      File.readable?(@file) &&
+      File.readlines(@file).each do |line|
+        next if line =~ /^(\#|\s*$)/
+
+        # if we encounter 'puppet.your.domain' (the default value from a
+        # fresh simp-bootstrap RPM), infer this is a freshly installed system
+        # with no legitimate autosign entries.
+        if line =~ /^puppet.your.domain/
+          values = []
+          break
+        end
+        values << line.strip
+      end
+      if values.size == 0
+        nil
+      else
+        values
+      end
+    end
+
+    def recommended_value
+      item = os_value
+      if !item
+        item = @config_items.fetch( 'hostname', nil )
+        item = [ item.value ] if item
+      end
+      item
+    end
+
+    def apply
+      entries = recommended_value
+      say_green "Updating #{@file}..." if !@silent
+      File.open(@file, 'w') do |file|
+        file.puts "# You should place any hostnames/domains here that you wish to autosign.\n" +
+                  "# The most security-conscious method is to list each individual hostname:\n" +
+                  "#   hosta.your.domain\n" +
+                  "#   hostb.your.domain\n" +
+                  "#\n" +
+                  "# Wildcard domains work, but absolutely should NOT be used unless you fully\n" +
+                  "# trust your network.\n" +
+                  "#   *.your.domain\n\n"
+        entries.each do |entry|
+          file.puts(entry)
+        end
+      end
+    end
+  end
+end

data/lib/simp/cli/config/item/puppet_ca.rb

@@ -0,0 +1,31 @@
+require 'highline/import'
+require 'puppet'
+require File.expand_path( '../item', File.dirname(__FILE__) )
+require File.expand_path( '../utils', File.dirname(__FILE__) )
+
+module Simp; end
+class Simp::Cli; end
+module Simp::Cli::Config
+  class Item::PuppetCA < Item
+    def initialize
+      super
+      @key         = 'puppet::ca'
+      @description = 'The Puppet Certificate Authority'
+    end
+
+    def os_value
+      Puppet.settings.setting( 'ca_server' ).value
+    end
+
+    def validate( x )
+      Simp::Cli::Config::Utils.validate_hostname( x ) ||
+      Simp::Cli::Config::Utils.validate_fqdn( x ) ||
+      Simp::Cli::Config::Utils.validate_ip( x )
+    end
+
+    def recommended_value
+      item = @config_items.fetch( 'hostname', nil )
+      item.value if item
+    end
+  end
+end